@cookiemunch/mcp 0.5.0 → 0.7.0

package/dist/{chunk-IQLCPEWI.js → chunk-QCLUFJZ5.js}

@@ -3,7 +3,7 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { createCookieMunch } from "@cookiemunch/sdk";
 
 // src/tools.ts
-import { z as z5 } from "zod";
+import { z as z6 } from "zod";
 
 // src/tools-config.ts
 import { z } from "zod";
@@ -534,6 +534,12 @@ function registerPlatformTools(tool, client) {
     {},
     () => client.fulfillment.executors()
   );
+  tool(
+    "get_dsar_executor",
+    "One connected system with its full profile (never its credentials). Read it before changing the profile: update_dsar_executor replaces the whole profile, so send back the complete one with your change made.",
+    { id: z2.string().describe("The connection id.") },
+    (a) => client.fulfillment.executor(a.id)
+  );
   tool(
     "connect_dsar_executor",
     "Connect a system that runs part of a rights request \u2014 an identity platform, a CRM, anything with a rights API. Cookie Munch is not specific to any platform: the `profile` describes that system's API (paths, the words it uses for export/erase, its status vocabulary, how it signs webhooks), so connecting a new one needs no code. The secret key is stored encrypted and never returned; the response carries the webhook URL to configure in that system. Sub-tasks open automatically once a request reaches fulfilment (after identity verification), and completions are picked up by webhook or by polling.",
@@ -541,12 +547,15 @@ function registerPlatformTools(tool, client) {
       preset: z2.string().optional().describe("Build profile (and, unless the preset takes baseUrl as a param, baseUrl) from a versioned preset instead of sending profile. list_dsar_executor_presets names them, what each needs, and which wait on another platform."),
       presetVersion: z2.number().int().optional().describe("With preset: the version to build. Default the latest."),
       orgId: z2.string().optional().describe("A preset param, when the preset's params list it."),
-      atlasIdAppId: z2.string().optional().describe("A preset param, when the preset's params list it: the identity platform's app id, so an erasure also revokes the app's grant."),
+      atlasIdAppId: z2.string().optional().describe("A preset param, when the preset's params list it: the identity platform's app id, kept for revokeAtlasIdGrant."),
+      revokeAtlasIdGrant: z2.boolean().optional().describe("A preset param, when the preset's params list it: default false. True adds an optional step that revokes the person's app grant on erasure; a credential without the scope reports skipped: insufficient_scope."),
+      label: z2.string().optional().describe("Your name for the credential, shown beside keyPrefix."),
       system: z2.string().optional().describe("The name this connection answers to in a plan, e.g. identity or crm. Required unless the preset has a default."),
       baseUrl: z2.string().optional().describe("The system's public https origin. Required unless the preset sets it."),
       secretKey: z2.string().describe("Its API key, with whatever scope that system needs to export and erase a user."),
       webhookSecret: z2.string().optional().describe("Signing secret of its webhook endpoint. Optional: polling closes tasks without it."),
       auto: z2.boolean().optional().describe("Open a sub-task automatically when a request reaches fulfilment. Default true."),
+      orchestrator: z2.union([z2.literal(1), z2.literal(2)]).optional().describe("How it takes part in cases. Default 2 (v2 headers on every call); 1 is the v1 adapter. The answer carries a completionSecret, shown once, that signs its completions."),
       profile: z2.record(z2.unknown()).optional().describe("How to drive that system: { open, poll, statuses } required, plus optional subjectLookup, auth, idempotencyHeader, grantRevoke and webhook. Omit it when using preset."),
       dryRun: z2.boolean().optional().describe("Validate everything and answer the connection that would be created, storing nothing.")
     },
@@ -555,6 +564,12 @@ function registerPlatformTools(tool, client) {
       return dryRun === true ? client.fulfillment.dryRunConnectExecutor(input) : client.fulfillment.connectExecutor(input);
     }
   );
+  tool(
+    "get_category_registry",
+    "The reserved consent categories any site can switch on with categories.suite (support_chat, referrals): each one\u2019s stance, the standard category to fall back on, the regulatory basis, its wording in every banner language, and known vendors. Public, read-only.",
+    {},
+    () => client.consent.categoryRegistry()
+  );
   tool(
     "list_dsar_executor_presets",
     "The versioned executor presets: each one's name, params, latest version, and whether it is usable now or waits on another platform's API (waitingOn names the platform and its spec items). Also this org's canary address for connection tests. Read-only.",
@@ -563,13 +578,15 @@ function registerPlatformTools(tool, client) {
   );
   tool(
     "upgrade_dsar_executor_preset",
-    "Rebuild a connection's profile and address from its preset's latest version (or presetVersion), keeping its id, credentials, system and scope \u2014 or adopt a preset on a hand-written connection by naming it. Answers with a diff. Use dryRun first: the answer shows exactly what would change and nothing is stored.",
+    "Rebuild a connection's profile and address from its preset's latest version (or presetVersion), keeping its id, credentials, system and scope \u2014 or adopt a preset on a hand-written connection by naming it. Your hand edits (profileOverrides) are kept and listed in the diff as kept or conflict; acceptPreset takes the preset's value for a path. A pinned connection (presetPinned) is refused. Use dryRun first: the answer shows exactly what would change and nothing is stored.",
     {
       id: z2.string().describe("The connection id."),
       preset: z2.string().optional().describe("Only to adopt a preset on a connection that has none."),
       presetVersion: z2.number().int().optional(),
       orgId: z2.string().optional(),
       atlasIdAppId: z2.string().optional(),
+      revokeAtlasIdGrant: z2.boolean().optional(),
+      acceptPreset: z2.array(z2.string()).optional().describe(`Overridden paths (profileOverrides) that take the preset's value again, e.g. ["profile.grantRevoke"]. Every other override is kept.`),
       dryRun: z2.boolean().optional().describe("Answer the diff and change nothing.")
     },
     (a) => {
@@ -593,6 +610,18 @@ function registerPlatformTools(tool, client) {
     { id: z2.string().describe("The connection id.") },
     (a) => client.fulfillment.executorWebhookDeliveries(a.id)
   );
+  tool(
+    "recheck_dsar_executor",
+    "Re-check a connected system now: a canary test (no real person) whose answer is recorded as the connection's health, so a stale failure clears at once. For after deploying that system's rights API.",
+    { id: z2.string().describe("The connection id.") },
+    (a) => client.fulfillment.recheckExecutor(a.id)
+  );
+  tool(
+    "list_dsar_executor_health_history",
+    "A connected system's last health checks, newest first (each with ok, verdict and lastCheckedAt). Read-only.",
+    { id: z2.string().describe("The connection id."), limit: z2.number().int().min(1).max(50).optional().describe("Default 50.") },
+    (a) => client.fulfillment.executorHealthHistory(a.id, typeof a.limit === "number" ? { limit: a.limit } : {})
+  );
   tool(
     "disconnect_dsar_executor",
     "Disconnect a system. Its open sub-tasks stop being driven, and the stored credentials are deleted.",
@@ -625,6 +654,18 @@ function registerPlatformTools(tool, client) {
       ...typeof a.open === "boolean" ? { open: a.open } : {}
     })
   );
+  tool(
+    "run_executor_conformance",
+    "Run the cm-standard-v2 conformance kit against a connected system: every rule of the open executor contract (lookup by email and identity, no email match across identities, executeAfter honoured, idempotency, cancel keeps data, 404s, X-Version), on this org's canary subject only \u2014 no real person. Each rule passes, fails or is skipped by name. Only for a cm-standard-v2 connection.",
+    { id: z2.string().describe("The connection id.") },
+    (a) => client.fulfillment.executorConformance(a.id)
+  );
+  tool(
+    "roll_executor_completion_secret",
+    "Mint a new completion secret for a connected system's signed completions. The new secret is in the answer, once \u2014 hand it to that system. The old one keeps verifying for 24 hours.",
+    { id: z2.string().describe("The connection id.") },
+    (a) => client.fulfillment.rollExecutorCompletionSecret(a.id)
+  );
   tool(
     "get_dsar_task_export",
     "The export bundle a connected system produced for one sub-task, fetched from that system on demand. The platform keeps no copy.",
@@ -731,13 +772,44 @@ function registerIntegrationTools(tool, client) {
     { cbid: z3.string().optional().describe("Site identifier; optional when the org has one site.") },
     (a) => client.integrationHealth(a.cbid)
   );
+  tool(
+    "list_health_waivers",
+    "The site\u2019s integration-health waivers: checks the organisation chose not to meet, each with its reason, who set it and until when. Read-only.",
+    { cbid: z3.string().optional().describe("Site identifier; optional when the org has one site.") },
+    (a) => client.healthWaivers.list(a.cbid)
+  );
+  const waiverSchema = z3.object({
+    cbid: z3.string().optional().describe("Site identifier; optional when the org has one site."),
+    check: z3.string().describe("A row\u2019s check or kind, e.g. atlas.cookie_consent."),
+    subject: z3.string().optional().describe("A row\u2019s subject; omitted: every subject of the check."),
+    reason: z3.string().describe("Why this is deliberate (shown on the row and in the audit log)."),
+    until: z3.union([z3.string(), z3.number()]).nullable().optional().describe("When the waiver ends (ISO date or epoch ms, within a year); omitted: never.")
+  });
+  tool(
+    "set_health_waiver",
+    "Waive an integration-health check the organisation deliberately does not meet: the row then reports ok:null with waived {reason, by, until} instead of failing. Audited. Use only for real, deliberate choices; fix the rest.",
+    waiverSchema.shape,
+    (a) => client.healthWaivers.set(waiverSchema.parse(a))
+  );
+  tool(
+    "remove_health_waiver",
+    "Remove an integration-health waiver, so the check reports its real state again. Audited.",
+    { check: z3.string(), cbid: z3.string().optional(), subject: z3.string().optional().describe("Default: every subject (*).") },
+    (a) => client.healthWaivers.remove(a.check, { ...a.cbid ? { cbid: a.cbid } : {}, ...a.subject ? { subject: a.subject } : {} })
+  );
+  tool(
+    "get_embed_manifest",
+    "A site\u2019s embed manifest (the tenant variant of /.well-known/forgedeck-embed.json): every origin the Cookie Munch embed touches on that site, by CSP directive (non-origin sources such as 'unsafe-inline' under requires), every cookie and browser-storage key it writes with category and lifetime, the checkers\u2019 User-Agent, and the hosts of the site\u2019s rights page and preference centre. Use it to build a Content-Security-Policy. Read-only.",
+    { cbid: z3.string() },
+    (a) => client.embedManifest(a.cbid)
+  );
   const provisionSchema = z3.object({
     product: z3.string().describe("A slug naming the product."),
     domain: z3.string().describe("The product\u2019s domain (bare hostname)."),
     name: z3.string().optional(),
     aliases: z3.array(z3.string()).optional(),
     cbid: z3.string().optional().describe("Update this site instead of matching by domain."),
-    atlas: z3.object({ secretKey: z3.string(), cookieConsent: z3.boolean().optional(), dsrWebhook: z3.boolean().optional(), frontendApiHost: z3.string().optional().describe("Your Atlas frontend API host (auth.example.com): declares the Atlas sign-in cookies on the site.") }).optional().describe("Atlas secret key (sk_\u2026) \u2014 used for this call only, never stored or returned."),
+    atlas: z3.object({ secretKey: z3.string(), cookieConsent: z3.boolean().optional(), dsrWebhook: z3.boolean().optional(), rightsIdentity: z3.boolean().optional().describe("Default true: make Atlas the site's rights sign-in, so signed-in requests are verified. A provider already in use is kept."), frontendApiHost: z3.string().optional().describe("Your Atlas frontend API host (auth.example.com): declares the Atlas sign-in cookies on the site.") }).optional().describe("Atlas secret key (sk_\u2026) \u2014 used for this call only, never stored or returned."),
     forumulate: z3.object({ token: z3.string(), orgId: z3.string(), consent: z3.boolean().optional(), executorKey: z3.boolean().optional(), label: z3.string().optional() }).optional().describe("Forumulate org token \u2014 used for this call only, never stored or returned."),
     rightsApi: z3.object({ baseUrl: z3.string(), secretKey: z3.string(), profilePreset: z3.string().optional() }).optional(),
     dryRun: z3.boolean().optional().describe("Report what each step would do; write nothing on any platform. Run this first.")
@@ -753,13 +825,13 @@ function registerIntegrationTools(tool, client) {
   );
   tool(
     "list_site_partners",
-    "Which partner platforms (Forumulate, Atlas) receive this site\u2019s consent events, each with its status, and which partners are on offer. Read-only.",
+    "Which partner platforms receive this site\u2019s consent events, each with its status, and which partners are on offer. Read-only.",
     { cbid: z3.string() },
     (a) => client.sites.listPartners(a.cbid)
   );
   const linkSchema = z3.object({
     cbid: z3.string(),
-    partner: z3.enum(["forumulate", "atlas"]),
+    partner: z3.string().describe("A partner this deployment knows: forumulate, atlas, chatly, referalli, or any other registered on it (list_site_partners shows them)."),
     externalId: z3.string().describe("The partner\u2019s id for the receiving account, e.g. a Forumulate organisation id."),
     label: z3.string().optional().describe('Shown with the partner name, e.g. "docs".'),
     events: z3.array(z3.enum(["consent.recorded", "consent.withdrawn"])).optional(),
@@ -782,31 +854,144 @@ function registerIntegrationTools(tool, client) {
   );
 }
 
-// src/tools-rights-page.ts
+// src/tools-keys-tags.ts
 import { z as z4 } from "zod";
+var TAGGED = ["org", "site", "webhook", "executor", "dsar", "partner_link"];
+function registerKeyAndTagTools(tool, client) {
+  tool(
+    "get_own_key",
+    "The API key this server runs with: its prefix, name, scopes, properties, expiry, owner and last use. Works with any key, however narrow. Use it to check how long the key has left. Read-only.",
+    {},
+    () => client.keys.self()
+  );
+  tool(
+    "list_api_versions",
+    "The dated API versions, what each one changed, and the version the key this server runs with is pinned to (`yours`). Read-only.",
+    {},
+    () => client.versions()
+  );
+  tool(
+    "set_own_api_version",
+    "Re-pin the key this server runs with to another dated API version (from list_api_versions). It changes how the API behaves for this key (for example strict request bodies from 2026-10-24), never what the key may do.",
+    { apiVersion: z4.string().describe("A version from list_api_versions, e.g. 2026-10-24.") },
+    (a) => client.keys.updateSelf({ apiVersion: a.apiVersion })
+  );
+  tool(
+    "get_sandbox",
+    "The organisation\u2019s sandbox (a separate test organisation with the same people and plan features, never billed), or null. Read-only.",
+    {},
+    () => client.sandbox.get()
+  );
+  tool(
+    "create_sandbox",
+    "Make a sandbox of the organisation, or return the one it has, with a new test-format key for it (shown once). Everything in a sandbox is test data: its keys are cookiemunch_test_ keys and every rights request filed there is a test. Needs a full-access key or orgs:create.",
+    { keyName: z4.string().min(1).max(100).optional().describe('A name for the new key. Default "sandbox".') },
+    (a) => client.sandbox.create(a.keyName !== void 0 ? { keyName: a.keyName } : {})
+  );
+  tool(
+    "list_api_keys_standard",
+    "The organisation\u2019s keys in the suite-standard shape (id, owner, kind, env, scopes, resources, created_at, expires_at, last_used_at, last_used_ip, status). Needs a full-access key. Read-only.",
+    {},
+    () => client.keys.listStandard()
+  );
+  const vendSchema = z4.object({
+    scopes: z4.array(z4.string()).min(1).describe("A subset of this key\u2019s own scopes."),
+    ttlSeconds: z4.number().int().min(60).max(43200).describe("How long the key works, at most 12 hours."),
+    cbids: z4.array(z4.string()).min(1).optional().describe("Lock it to these sites (within this key\u2019s own lock)."),
+    name: z4.string().max(100).optional()
+  });
+  tool(
+    "vend_api_key",
+    "Mint a short-lived key (at most 12 hours) for a sub-task, with a subset of this key\u2019s own scopes and properties; never a key that can vend. The secret is returned once. Needs keys:write or a full-access key.",
+    vendSchema.shape,
+    (a) => client.keys.vend(vendSchema.parse(a))
+  );
+  tool(
+    "revoke_leaked_key",
+    "Revoke an API key whose secret has been published (pasted in a chat, a gist, a log). Pass the whole secret. It only ever revokes, and always answers { received } whether or not the key was live. The owner is mailed.",
+    { key: z4.string().describe("The leaked secret, whole."), source: z4.string().optional().describe("Where it was found (a URL).") },
+    (a) => client.keys.revokeLeaked({ key: a.key, ...a.source ? { source: a.source } : {} })
+  );
+  tool(
+    "get_resource_tags",
+    "A resource\u2019s tags (metadata), its externalRef and whether it is a sandbox. Read-only.",
+    { type: z4.enum(TAGGED), id: z4.string() },
+    (a) => client.metadata.get(a.type, a.id)
+  );
+  const tagsSchema = z4.object({
+    type: z4.enum(TAGGED),
+    id: z4.string(),
+    metadata: z4.record(z4.union([z4.string(), z4.number(), z4.boolean(), z4.null()])).describe("Keys to set; null removes one. forgedeck_sandbox cannot be set here."),
+    dryRun: z4.boolean().optional().describe("Answer with the diff, storing nothing. Do this first.")
+  });
+  tool(
+    "update_resource_tags",
+    "Change a resource\u2019s tags (merge). For adopting resources created before tags existed, e.g. forgedeck_product and forgedeck_env. A resource can never be made a sandbox after it was created.",
+    tagsSchema.shape,
+    (a) => {
+      const { type, id, metadata, dryRun } = tagsSchema.parse(a);
+      return client.metadata.update(type, id, metadata, { dryRun });
+    }
+  );
+  tool(
+    "list_partner_links",
+    "Every partner link of the organisation (site and org links), with scopes, expiry, last use and calls in the last 30 days. Read-only.",
+    { metadata: z4.record(z4.string()).optional().describe("Keep only links with these tags.") },
+    (a) => client.partnerLinks.list(a.metadata ? { metadata: a.metadata } : void 0)
+  );
+  const linkSchema = z4.object({
+    partner: z4.string().describe("A partner this deployment knows (built in or registered)."),
+    resource: z4.string().describe("site:<cbid> or org:<this org id>."),
+    scopes: z4.array(z4.enum(["consent:read", "receipt:read", "dsar:read", "dsar:write", "dsar:rights-links", "sites:read"])).min(1),
+    expires_at: z4.string().optional().describe("ISO 8601, in the future."),
+    externalId: z4.string().optional(),
+    label: z4.string().max(60).optional()
+  });
+  tool(
+    "create_partner_link",
+    "Let a partner platform act on a site or on the organisation within these scopes (it calls the API with its own token and the link id), and, with consent:read on a site, receive that site\u2019s consent events. No secret is created. Never grants more than this key holds.",
+    linkSchema.shape,
+    (a) => client.partnerLinks.create(linkSchema.parse(a))
+  );
+  tool(
+    "revoke_partner_link",
+    "Revoke a partner link: the partner\u2019s calls under it and its deliveries stop at once.",
+    { id: z4.string() },
+    (a) => client.partnerLinks.revoke(a.id)
+  );
+  tool(
+    "get_provision_env",
+    "What `forgedeck env` writes for a product provisioned with this forgedeck ref: variable names, non-secret values (cbid, script URL, API base) and references for secrets, never a secret. Read-only.",
+    { ref: z4.string() },
+    (a) => client.provisionEnv(a.ref)
+  );
+}
+
+// src/tools-rights-page.ts
+import { z as z5 } from "zod";
 function registerRightsTools(tool, client) {
-  const cbid = { cbid: z4.string().describe("Site identifier (cbid). Must belong to your org.") };
+  const cbid = { cbid: z5.string().describe("Site identifier (cbid). Must belong to your org.") };
   const base = {
-    baseUpdatedAt: z4.union([z4.number().int(), z4.string(), z4.null()]).optional().describe("The draft\u2019s updatedAt from your last read (null if it had none). If someone saved since, the write is refused with 409 draft_conflict and the current draft; omit to overwrite regardless.")
+    baseUpdatedAt: z5.union([z5.number().int(), z5.string(), z5.null()]).optional().describe("The draft\u2019s updatedAt from your last read (null if it had none). If someone saved since, the write is refused with 409 draft_conflict and the current draft; omit to overwrite regardless.")
   };
   const baseOpt = (a) => a.baseUpdatedAt !== void 0 ? { baseUpdatedAt: a.baseUpdatedAt } : {};
   tool("get_rights_page", "Read the site\u2019s rights page DRAFT (the default page until first saved), with warnings that would block publishing.", cbid, (a) => client.rightsPage.get(a.cbid));
   tool(
     "update_rights_page",
     "Replace the rights page draft with a full document (theme, sections, form, i18n, seo, customCss). Nothing goes live until publish_rights_page. Prefer patch_rights_page for small changes and preview_rights_page when unsure. Pass baseUpdatedAt (from get_rights_page) to avoid overwriting someone else\u2019s save: a mismatch is 409 draft_conflict with the current draft.",
-    { ...cbid, page: z4.record(z4.unknown()).describe("The whole RightsPage document (v: 1)."), ...base },
+    { ...cbid, page: z5.record(z5.unknown()).describe("The whole RightsPage document (v: 1)."), ...base },
     (a) => client.rightsPage.put(a.cbid, a.page, baseOpt(a))
   );
   tool(
     "patch_rights_page",
     "Change part of the rights page draft: objects merge, arrays (sections, request types, fields) replace whole, null removes a field. baseUpdatedAt works as on update_rights_page (409 draft_conflict).",
-    { ...cbid, patch: z4.record(z4.unknown()), ...base },
+    { ...cbid, patch: z5.record(z5.unknown()), ...base },
     (a) => client.rightsPage.patch(a.cbid, a.patch, baseOpt(a))
   );
   tool(
     "preview_rights_page",
     'Validate a rights-page write WITHOUT saving: returns the document as it would be stored and any publish warnings. mode "patch" (default) or "put".',
-    { ...cbid, page: z4.record(z4.unknown()), mode: z4.enum(["patch", "put"]).optional() },
+    { ...cbid, page: z5.record(z5.unknown()), mode: z5.enum(["patch", "put"]).optional() },
     (a) => client.rightsPage.dryRun(a.cbid, a.page, { mode: a.mode ?? "patch" })
   );
   tool("get_published_rights_page", "Read the LIVE rights page document (404 not_published while the site shows the default page).", cbid, (a) => client.rightsPage.getPublished(a.cbid));
@@ -820,14 +1005,14 @@ function registerRightsTools(tool, client) {
   tool(
     "rollback_rights_page",
     "Publish an earlier version of the rights page again (as a new version): it goes live at once and REPLACES the current draft, so unpublished edits are lost and cannot be recovered (versions hold only published documents). Pass baseUpdatedAt (from get_rights_page) to refuse with 409 draft_conflict if anyone saved the draft since you read it.",
-    { ...cbid, version: z4.number().int().min(1), ...base },
+    { ...cbid, version: z5.number().int().min(1), ...base },
     (a) => client.rightsPage.rollback(a.cbid, a.version, baseOpt(a))
   );
 }
 function registerRightsPageTools(tool, client) {
-  const site = z4.object({ cbid: z4.string().describe("Site identifier (cbid). Must belong to your org.") });
+  const site = z5.object({ cbid: z5.string().describe("Site identifier (cbid). Must belong to your org.") });
   const host = site.extend({
-    hostname: z4.string().describe("The custom hostname, e.g. privacy.example.com (unicode or punycode).")
+    hostname: z5.string().describe("The custom hostname, e.g. privacy.example.com (unicode or punycode).")
   });
   tool(
     "list_rights_page_domains",
@@ -967,10 +1152,10 @@ function registerTools(server, client) {
       }
     });
   };
-  const cbid = { cbid: z5.string().describe("Site identifier (cbid). Must belong to your org.") };
+  const cbid = { cbid: z6.string().describe("Site identifier (cbid). Must belong to your org.") };
   const range = {
-    from: z5.number().optional().describe("Epoch-ms lower bound."),
-    to: z5.number().optional().describe("Epoch-ms upper bound.")
+    from: z6.number().optional().describe("Epoch-ms lower bound."),
+    to: z6.number().optional().describe("Epoch-ms upper bound.")
   };
   tool(
     "whoami",
@@ -988,19 +1173,19 @@ function registerTools(server, client) {
   tool(
     "get_site",
     "One site: its domain, cbid and verification status. Read-only.",
-    { cbid: z5.string() },
+    { cbid: z6.string() },
     (a) => client.sites.get(a.cbid)
   );
   tool(
     "get_site_banner",
     "Which banner design a site uses, or bannerId null when none is assigned. Read-only.",
-    { cbid: z5.string() },
+    { cbid: z6.string() },
     (a) => client.sites.banner(a.cbid)
   );
   tool(
     "get_privacy_policy",
     "Generate the site's privacy and cookie policy as Markdown, naming the org's data controller. Needs a contact email: the one given, else the org controller's, else the owner's. Read-only \u2014 nothing is published.",
-    { cbid: z5.string(), contactEmail: z5.string().optional(), effectiveDate: z5.string().optional().describe("YYYY-MM-DD; defaults to today."), jurisdictions: z5.array(z5.string()).optional() },
+    { cbid: z6.string(), contactEmail: z6.string().optional(), effectiveDate: z6.string().optional().describe("YYYY-MM-DD; defaults to today."), jurisdictions: z6.array(z6.string()).optional() },
     (a) => client.sites.policy(a.cbid, {
       ...a.contactEmail ? { contactEmail: a.contactEmail } : {},
       ...a.effectiveDate ? { effectiveDate: a.effectiveDate } : {},
@@ -1010,7 +1195,7 @@ function registerTools(server, client) {
   tool(
     "set_ad_personalization",
     "Add or remove the separate 'personalised ads' choice on the site's live banner. With it on, accepting marketing no longer implies personalised ads unless `default` is true.",
-    { cbid: z5.string(), enabled: z5.boolean(), default: z5.boolean().optional(), label: z5.string().optional() },
+    { cbid: z6.string(), enabled: z6.boolean(), default: z6.boolean().optional(), label: z6.string().optional() },
     (a) => client.sites.setAdPersonalization(a.cbid, {
       enabled: a.enabled,
       ...a.default !== void 0 ? { default: a.default } : {},
@@ -1021,11 +1206,11 @@ function registerTools(server, client) {
     "analyze_session",
     "Analyse a captured browsing session against the consent it ran under: which trackers fired after the visitor opted out, and what personal data left the page. Read-only.",
     {
-      cbid: z5.string(),
-      har: z5.unknown().optional().describe("A HAR export of the session."),
-      requests: z5.array(z5.unknown()).optional().describe("Or the requests directly."),
-      consent: z5.record(z5.string(), z5.boolean()).optional(),
-      gpc: z5.boolean().optional()
+      cbid: z6.string(),
+      har: z6.unknown().optional().describe("A HAR export of the session."),
+      requests: z6.array(z6.unknown()).optional().describe("Or the requests directly."),
+      consent: z6.record(z6.string(), z6.boolean()).optional(),
+      gpc: z6.boolean().optional()
     },
     (a) => client.sites.analyzeSession(a.cbid, {
       ...a.har !== void 0 ? { har: a.har } : {},
@@ -1037,14 +1222,14 @@ function registerTools(server, client) {
   tool(
     "create_site",
     "Create a new site. The cbid is auto-generated if you omit it.",
-    { domain: z5.string().describe("The site domain, e.g. example.com."), cbid: z5.string().optional().describe("Optional explicit cbid.") },
+    { domain: z6.string().describe("The site domain, e.g. example.com."), cbid: z6.string().optional().describe("Optional explicit cbid.") },
     (a) => client.sites.create({ domain: a.domain, ...typeof a.cbid === "string" ? { cbid: a.cbid } : {} })
   );
   tool(
     "create_sites_bulk",
     "Create up to 100 sites in one call. Partial success: each item reports ok or its own error, and a bad or duplicate item fails only itself.",
     {
-      sites: z5.array(z5.object({ domain: z5.string(), cbid: z5.string().optional(), platform: z5.string().optional() })).min(1).max(100)
+      sites: z6.array(z6.object({ domain: z6.string(), cbid: z6.string().optional(), platform: z6.string().optional() })).min(1).max(100)
     },
     (a) => client.sites.createBulk(a.sites)
   );
@@ -1054,15 +1239,15 @@ function registerTools(server, client) {
     "Replace (overwrite) the banner/consent configuration for a site via PUT. This is destructive, not a merge: any top-level SiteConfig field you omit from `config` reverts to its default rather than keeping its current value \u2014 unless keepUnspecified is true, in which case omitted top-level fields keep their stored value and only the fields you send are replaced (each whole). A top-level field sent as null reverts to its default. To change one setting, use patch_site_config instead \u2014 it merges server-side. Prefer the narrower set_* tools (set_blocking, set_banner_basics, etc.) when they cover your change.",
     {
       ...cbid,
-      config: z5.record(z5.unknown()).describe("The full SiteConfig to write, not a patch. Without keepUnspecified, omitted top-level fields are NOT preserved from the current config."),
-      keepUnspecified: z5.boolean().optional().describe("PUT ?keep=unspecified: keep the stored value of every top-level field `config` omits, instead of reverting it to its default.")
+      config: z6.record(z6.unknown()).describe("The full SiteConfig to write, not a patch. Without keepUnspecified, omitted top-level fields are NOT preserved from the current config."),
+      keepUnspecified: z6.boolean().optional().describe("PUT ?keep=unspecified: keep the stored value of every top-level field `config` omits, instead of reverting it to its default.")
     },
     (a) => a.keepUnspecified === true ? client.sites.putConfig(a.cbid, a.config, { keep: "unspecified" }) : client.sites.putConfig(a.cbid, a.config)
   );
   tool(
     "patch_site_config",
     `Change part of a site's banner/consent configuration. The patch is a JSON Merge Patch (RFC 7386) over the stored config server-side: any field you omit keeps its current value, and a field set to null is REMOVED (it falls back to its default) \u2014 e.g. { "banner": { "i18n": { "es": null } } } drops the Spanish override. This is the safe way to flip one setting, and it needs no read-modify-write. Use update_site_config only when you genuinely mean to replace the whole document.`,
-    { ...cbid, config: z5.record(z5.unknown()).describe('The subset of SiteConfig to change, e.g. { "banner": { "showRightsLink": true } }. Everything else is preserved; null removes a field.') },
+    { ...cbid, config: z6.record(z6.unknown()).describe('The subset of SiteConfig to change, e.g. { "banner": { "showRightsLink": true } }. Everything else is preserved; null removes a field.') },
     (a) => client.sites.patchConfig(a.cbid, a.config)
   );
   tool(
@@ -1070,9 +1255,9 @@ function registerTools(server, client) {
     'Preview a config change WITHOUT saving it: returns the config as it would be saved, a diff of every field that would change, and any warnings (plan-gated or unrecognised fields). mode "patch" (default) previews patch_site_config; mode "put" previews update_site_config, and its diff lists everything a replace would revert to its default (unless keepUnspecified is true). Use it before any write you are not sure of.',
     {
       ...cbid,
-      config: z5.record(z5.unknown()).describe('The patch (or, with mode "put", the full config) to preview.'),
-      mode: z5.enum(["patch", "put"]).optional().describe("patch (default) merges; put replaces."),
-      keepUnspecified: z5.boolean().optional().describe('With mode "put": preview update_site_config with keepUnspecified (omitted top-level fields keep their stored value).')
+      config: z6.record(z6.unknown()).describe('The patch (or, with mode "put", the full config) to preview.'),
+      mode: z6.enum(["patch", "put"]).optional().describe("patch (default) merges; put replaces."),
+      keepUnspecified: z6.boolean().optional().describe('With mode "put": preview update_site_config with keepUnspecified (omitted top-level fields keep their stored value).')
     },
     (a) => client.sites.dryRunConfig(a.cbid, a.config, {
       mode: a.mode ?? "patch",
@@ -1084,8 +1269,8 @@ function registerTools(server, client) {
     'Check a banner config for consent-button parity WITHOUT saving it: is "Accept all" more prominent than "Reject all" anywhere \u2014 a brighter or more saturated colour, a bigger or bolder button, Reject styled as a link, hidden, below the fold, set apart, missing from the first layer, or worded to guilt-trip? Regulators (EDPB, CNIL) treat that as a dark pattern. Returns findings, a 0\u2013100 score and the reject style that would match Accept. It checks exactly what the write would store: merged over the stored config as patch_site_config would, or with replace: true replaced as update_site_config would. Run it before writing any banner design.',
     {
       ...cbid,
-      config: z5.record(z5.unknown()).describe("The proposed SiteConfig (or a partial one, or a v2 flow design)."),
-      replace: z5.boolean().optional().describe("Check what update_site_config (a full replace) would store, instead of what patch_site_config (a merge) would.")
+      config: z6.record(z6.unknown()).describe("The proposed SiteConfig (or a partial one, or a v2 flow design)."),
+      replace: z6.boolean().optional().describe("Check what update_site_config (a full replace) would store, instead of what patch_site_config (a merge) would.")
     },
     async (a) => {
       const r = await client.sites.lintConfig(a.cbid, a.config, a.replace === true ? { replace: true } : {});
@@ -1106,10 +1291,16 @@ ${JSON.stringify(r, null, 2)}` : r;
     { ...cbid, ...range },
     (a) => client.consent.stats(a.cbid, { from: a.from, to: a.to })
   );
+  tool(
+    "get_consent_insights",
+    "Opt-in rates for a site: totals with the decision rate (decisions per banner impression), opt-in by region, and by A/B variant (all-time counters). Opt-in by language and time-to-decision are not recorded; those fields are null and notRecorded says why. Read-only.",
+    { ...cbid, ...range },
+    (a) => client.consent.insights(a.cbid, { from: a.from, to: a.to })
+  );
   tool(
     "get_consent_log",
     "Get recent anonymised consent records for a site.",
-    { ...cbid, ...range, limit: z5.number().optional().describe("Max records to return (default 200).") },
+    { ...cbid, ...range, limit: z6.number().optional().describe("Max records to return (default 200).") },
     (a) => client.consent.log(a.cbid, {
       from: a.from,
       to: a.to,
@@ -1119,54 +1310,54 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "get_subject_consent",
     "One person's consent records across every site in the org \u2014 web, mobile and desktop \u2014 by the subjectId your apps attach. Consent data: needs the consent:read scope. Read-only.",
-    { subjectId: z5.string() },
+    { subjectId: z6.string() },
     (a) => client.subjects.consent(a.subjectId)
   );
   tool("list_dsar", "List all Data Subject Access Requests for your organization.", {}, () => client.dsar.list());
   tool(
     "update_dsar_executor",
-    "Change a connected system in place \u2014 its profile, address, credential or auto flag. Only what you pass changes; the stored credential is kept unless you give a new one. With dryRun, answers the connection as it would be and a diff, and changes nothing.",
+    "Change a connected system in place \u2014 its profile, address, credential, label (null removes it), auto flag or presetPinned (true stops preset upgrades). Only what you pass changes; the stored credential is kept unless you give a new one. A profile edit on a preset-built connection is recorded in profileOverrides, so an upgrade keeps it. With dryRun, answers the connection as it would be and a diff, and changes nothing.",
     {
-      id: z5.string(),
-      patch: z5.record(z5.unknown()),
-      dryRun: z5.boolean().optional().describe("Validate and diff without saving.")
+      id: z6.string(),
+      patch: z6.record(z6.unknown()),
+      dryRun: z6.boolean().optional().describe("Validate and diff without saving.")
     },
     (a) => a.dryRun === true ? client.fulfillment.dryRunUpdateExecutor(a.id, a.patch) : client.fulfillment.updateExecutor(a.id, a.patch)
   );
   tool(
     "get_dsar",
     "One rights request by id, including its status and the deadline it must be answered by.",
-    { id: z5.string() },
+    { id: z6.string() },
     (a) => client.dsar.get(a.id)
   );
   tool(
     "erase_dsar_subject",
     "For a deletion request that is past identity verification: erase the person\u2019s consent records on one site, identified by their consent stamp. Irreversible. The erasure is noted on the request. If the response carries a warning, nothing was cryptographically erased \u2014 tell the user.",
-    { id: z5.string(), cbid: z5.string(), stamp: z5.string() },
+    { id: z6.string(), cbid: z6.string(), stamp: z6.string() },
     (a) => client.dsar.erase(a.id, a.cbid, a.stamp)
   );
   tool(
     "export_dsar_subject",
     "For an access or portability request that is past identity verification: the person\u2019s consent records on one site, identified by their consent stamp. The export is noted on the request.",
-    { id: z5.string(), cbid: z5.string(), stamp: z5.string() },
+    { id: z6.string(), cbid: z6.string(), stamp: z6.string() },
     (a) => client.dsar.export(a.id, a.cbid, a.stamp)
   );
   tool(
     "get_dsar_response_notice",
     "The subject-facing response notice for a request, as plain text \u2014 what to send the person. Read-only; nothing is sent.",
-    { id: z5.string() },
+    { id: z6.string() },
     (a) => client.dsar.response(a.id)
   );
   tool(
     "create_dsar",
     "Open a new Data Subject Access Request.",
     {
-      type: z5.enum(["access", "deletion", "rectification", "portability", "opt-out"]).describe("DSAR right being exercised."),
-      subjectEmail: z5.string().describe("The data subject\u2019s email."),
-      regulation: z5.enum(["gdpr", "ccpa"]).describe("Governing regulation."),
-      note: z5.string().optional().describe("Optional INTERNAL note; never shown to the data subject."),
-      messageToSubject: z5.string().max(2e3).optional().describe("The line the data subject reads in the response notice. Never an API key."),
-      test: z5.boolean().optional().describe("Mark it as a test request: kept off the SLA board and deletable afterwards with delete_test_dsar.")
+      type: z6.enum(["access", "deletion", "rectification", "portability", "opt-out"]).describe("DSAR right being exercised."),
+      subjectEmail: z6.string().describe("The data subject\u2019s email."),
+      regulation: z6.enum(["gdpr", "ccpa"]).describe("Governing regulation."),
+      note: z6.string().optional().describe("Optional INTERNAL note; never shown to the data subject."),
+      messageToSubject: z6.string().max(2e3).optional().describe("The line the data subject reads in the response notice. Never an API key."),
+      test: z6.boolean().optional().describe("Mark it as a test request: kept off the SLA board and deletable afterwards with delete_test_dsar.")
     },
     (a) => client.dsar.create({
       type: a.type,
@@ -1181,11 +1372,11 @@ ${JSON.stringify(r, null, 2)}` : r;
     "create_rights_link",
     "Mint a signed, single-use link to a site\u2019s hosted rights page for a person you know is signed in to that site. On the page their email is filled in and locked and the email-code step is skipped; the filed request is recorded as verified by their account. Give the link only to that person. Expires in 15 minutes by default (max 1 hour). Needs dsar:write.",
     {
-      cbid: z5.string().describe("Site identifier (cbid). Must belong to your org."),
-      email: z5.string().describe("The signed-in person\u2019s verified email address."),
-      userId: z5.string().optional().describe("Your own account id for them; recorded on the request."),
-      rights: z5.array(z5.enum(["access", "erasure", "rectification", "portability", "restriction", "objection", "opt_out_sale", "opt_out_targeted", "limit_sensitive"])).min(1).optional().describe("Limit the link to these rights. Default: every right the page offers."),
-      ttlSeconds: z5.number().int().min(60).max(3600).optional().describe("How long the link works, in seconds (default 900).")
+      cbid: z6.string().describe("Site identifier (cbid). Must belong to your org."),
+      email: z6.string().describe("The signed-in person\u2019s verified email address."),
+      userId: z6.string().optional().describe("Your own account id for them; recorded on the request."),
+      rights: z6.array(z6.enum(["access", "erasure", "rectification", "portability", "restriction", "objection", "opt_out_sale", "opt_out_targeted", "limit_sensitive"])).min(1).optional().describe("Limit the link to these rights. Default: every right the page offers."),
+      ttlSeconds: z6.number().int().min(60).max(3600).optional().describe("How long the link works, in seconds (default 900).")
     },
     (a) => client.rightsLinks.create(a.cbid, {
       subject: { email: a.email, ...typeof a.userId === "string" ? { userId: a.userId } : {} },
@@ -1196,7 +1387,7 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "delete_test_dsar",
     "Delete a TEST rights request (one created with test: true), with its tasks and their upstream log. Real requests cannot be deleted and are refused. The deletion is recorded in the audit log.",
-    { id: z5.string().describe("The test request id.") },
+    { id: z6.string().describe("The test request id.") },
     async (a) => {
       await client.dsar.delete(a.id);
       return { deleted: a.id };
@@ -1205,16 +1396,99 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "mark_dsar_test",
     "Mark a CLOSED rights request (completed or rejected) as a test request, after the fact \u2014 for trial requests filed before test: true existed. An open request is refused (request_not_closed), so a live obligation can never be relabelled. Recorded in the audit log; afterwards delete_test_dsar can remove it. Returns { request, changed }.",
-    { id: z5.string().describe("The closed request id.") },
+    { id: z6.string().describe("The closed request id.") },
     (a) => client.dsar.markTest(a.id)
   );
+  tool(
+    "open_dsar_case",
+    "Open a rights case fanned out to every connected system \u2014 an account closure from a product, an erasure, an export. type takes the canonical words (access, deletion, closure, restriction, rectification) or an alias (erasure, erase, export). For an erasure or closure, executeAfter = now + the site's graceDays is sent to every system and nothing is erased before it. source product or atlas attests the person (needs dsar:write; atlas needs subject.identity from the site's own sign-in issuer); admin files it received for verification. Pass idempotencyKey (16\u2013128 chars) so a retry answers the same case.",
+    {
+      cbid: z6.string(),
+      type: z6.string().describe("access | deletion | closure | restriction | rectification, or erasure / erase / export."),
+      emails: z6.array(z6.string()).optional().describe("The person's addresses."),
+      identity: z6.object({ iss: z6.string(), sub: z6.string(), ext: z6.string().optional(), principal: z6.string().optional() }).optional().describe("A signed-in identity from the site's sign-in issuer. People are never linked on email when it is present."),
+      source: z6.enum(["product", "atlas", "admin"]).optional(),
+      reason: z6.string().optional(),
+      skipSystems: z6.array(z6.string()).optional().describe("System names, connection ids, or self."),
+      fulfill: z6.boolean().optional(),
+      test: z6.boolean().optional(),
+      idempotencyKey: z6.string().optional(),
+      trace: z6.string().optional().describe("An X-ForgeDeck-Trace to keep, from the caller.")
+    },
+    (a) => client.dsar.openCase(
+      {
+        cbid: a.cbid,
+        type: a.type,
+        subject: { emails: a.emails ?? [], ...a.identity ? { identity: a.identity } : {} },
+        ...a.source ? { source: a.source } : {},
+        ...typeof a.reason === "string" ? { reason: a.reason } : {},
+        ...Array.isArray(a.skipSystems) ? { skipSystems: a.skipSystems } : {},
+        ...typeof a.fulfill === "boolean" ? { fulfill: a.fulfill } : {},
+        ...a.test === true ? { test: true } : {}
+      },
+      {
+        ...typeof a.idempotencyKey === "string" ? { idempotencyKey: a.idempotencyKey } : {},
+        ...typeof a.trace === "string" ? { trace: a.trace } : {}
+      }
+    )
+  );
+  tool(
+    "get_dsar_case",
+    "One case across every connected system: its status (pending, scheduled, processing, completed, completed_with_retention, rejected, cancelled), executeAfter, trace and one row per system with its status, eta and retention lines. Read-only.",
+    { id: z6.string() },
+    (a) => client.dsar.getCase(a.id)
+  );
+  tool(
+    "cancel_dsar_case",
+    "Cancel a case before its executeAfter: work never sent is withdrawn, scheduled work is cancelled in each system, and every system's data stays intact. Refused once executeAfter has passed.",
+    { id: z6.string() },
+    (a) => client.dsar.cancelCase(a.id)
+  );
+  tool(
+    "get_dsar_case_receipt",
+    "The signed receipt for a case: every system, its status and date, retention lines, the subject as hashes only. Ed25519, verifiable against GET /v1/partner/jwks.json. Read-only.",
+    { id: z6.string() },
+    (a) => client.dsar.caseReceipt(a.id)
+  );
+  tool(
+    "find_dsar_by_trace",
+    "The rights request carrying one X-ForgeDeck-Trace id \u2014 to follow one event across products. Read-only.",
+    { trace: z6.string() },
+    (a) => client.dsar.listByTrace(a.trace)
+  );
+  tool(
+    "get_dsar_settings",
+    "A site's rights-request settings: graceDays, how long an erasure or account closure waits before any system acts: 7 for a new site, 0 (opt-in) for one that existed before. Read-only.",
+    { cbid: z6.string() },
+    (a) => client.dsarSettings.get(a.cbid)
+  );
+  tool(
+    "set_dsar_settings",
+    "Set a site's graceDays (0\u201330). Applies to cases opened afterwards. Audited.",
+    { cbid: z6.string(), graceDays: z6.number().int().min(0).max(30) },
+    (a) => client.dsarSettings.set(a.cbid, { graceDays: a.graceDays })
+  );
+  tool(
+    "get_subject_card",
+    'Open rights requests for one person, as a support or CRM sidebar shows them \u2014 e.g. "erasure scheduled for 1 Nov: do not export this transcript". Name the person by iss and sub (preferred) or email. Read-only.',
+    {
+      app: z6.string().describe("The sidebar app asking, as a slug, e.g. chatly."),
+      iss: z6.string().optional(),
+      sub: z6.string().optional(),
+      email: z6.string().optional()
+    },
+    (a) => client.integrations.subjectCard(
+      a.app,
+      typeof a.iss === "string" && typeof a.sub === "string" ? { iss: a.iss, sub: a.sub } : { email: String(a.email ?? "") }
+    )
+  );
   tool(
     "advance_dsar",
     "Advance a DSAR to a new status (received \u2192 verifying \u2192 in_progress \u2192 completed, or rejected).",
     {
-      id: z5.string().describe("The DSAR id."),
-      toStatus: z5.enum(["received", "verifying", "in_progress", "completed", "rejected"]).describe("Target status."),
-      messageToSubject: z5.string().max(2e3).optional().describe("Replaces the line the data subject reads in the notice \u2014 for a rejection, why.")
+      id: z6.string().describe("The DSAR id."),
+      toStatus: z6.enum(["received", "verifying", "in_progress", "completed", "rejected"]).describe("Target status."),
+      messageToSubject: z6.string().max(2e3).optional().describe("Replaces the line the data subject reads in the notice \u2014 for a rejection, why.")
     },
     (a) => typeof a.messageToSubject === "string" ? client.dsar.advance(a.id, a.toStatus, { messageToSubject: a.messageToSubject }) : client.dsar.advance(a.id, a.toStatus)
   );
@@ -1227,7 +1501,7 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "get_receipt",
     "Fetch the signed consent receipt for a single consent record (by stamp).",
-    { ...cbid, stamp: z5.string().describe("The consent record stamp/id.") },
+    { ...cbid, stamp: z6.string().describe("The consent record stamp/id.") },
     (a) => client.consent.receipt(a.cbid, a.stamp)
   );
   tool("delete_site", "Delete a site (cbid) and its configuration from your org.", { ...cbid }, async (a) => {
@@ -1239,13 +1513,13 @@ ${JSON.stringify(r, null, 2)}` : r;
     "create_vendor",
     "Register a vendor (processor) and compute its risk score.",
     {
-      name: z5.string().describe("Vendor name."),
-      category: z5.string().describe("Vendor category, e.g. analytics."),
-      dataShared: z5.array(z5.string()).describe("Categories of data shared with the vendor."),
-      dpaSigned: z5.boolean().describe("Whether a Data Processing Agreement is signed."),
-      subprocessors: z5.number().describe("Number of subprocessors."),
-      certifications: z5.array(z5.string()).describe("Compliance certifications, e.g. ISO27001."),
-      region: z5.string().describe("Primary processing region, e.g. EU.")
+      name: z6.string().describe("Vendor name."),
+      category: z6.string().describe("Vendor category, e.g. analytics."),
+      dataShared: z6.array(z6.string()).describe("Categories of data shared with the vendor."),
+      dpaSigned: z6.boolean().describe("Whether a Data Processing Agreement is signed."),
+      subprocessors: z6.number().describe("Number of subprocessors."),
+      certifications: z6.array(z6.string()).describe("Compliance certifications, e.g. ISO27001."),
+      region: z6.string().describe("Primary processing region, e.g. EU.")
     },
     (a) => client.vendors.create({
       name: a.name,
@@ -1263,13 +1537,13 @@ ${JSON.stringify(r, null, 2)}` : r;
     "create_ropa",
     "Create a Record of Processing Activity (RoPA) entry.",
     {
-      name: z5.string().describe("Activity name."),
-      purpose: z5.string().describe("Purpose of processing."),
-      legalBasis: z5.enum(["consent", "contract", "legal-obligation", "vital-interests", "public-task", "legitimate-interests"]).describe("GDPR legal basis."),
-      dataCategories: z5.array(z5.string()).describe("Categories of personal data."),
-      recipients: z5.array(z5.string()).describe("Recipients of the data."),
-      retentionDays: z5.number().describe("Retention period in days."),
-      crossBorderTransfer: z5.boolean().describe("Whether data is transferred across borders.")
+      name: z6.string().describe("Activity name."),
+      purpose: z6.string().describe("Purpose of processing."),
+      legalBasis: z6.enum(["consent", "contract", "legal-obligation", "vital-interests", "public-task", "legitimate-interests"]).describe("GDPR legal basis."),
+      dataCategories: z6.array(z6.string()).describe("Categories of personal data."),
+      recipients: z6.array(z6.string()).describe("Recipients of the data."),
+      retentionDays: z6.number().describe("Retention period in days."),
+      crossBorderTransfer: z6.boolean().describe("Whether data is transferred across borders.")
     },
     (a) => client.ropa.create({
       name: a.name,
@@ -1290,7 +1564,7 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "scan_site",
     "Trigger a cookie crawl of a site (at most 90 s). Returns its scanId and state (queued). With wait: true, returns once it is done or failed \u2014 state, cookieCount, pagesVisited, durationMs, error. The stored list keeps cookies earlier crawls and real visits found; retire one the site no longer sets.",
-    { ...cbid, wait: z5.boolean().optional().describe("Wait for the scan to finish (up to 100 s) and return its outcome.") },
+    { ...cbid, wait: z6.boolean().optional().describe("Wait for the scan to finish (up to 100 s) and return its outcome.") },
     async (a) => {
       let started;
       try {
@@ -1303,8 +1577,8 @@ ${JSON.stringify(r, null, 2)}` : r;
   );
   tool(
     "get_scan_status",
-    "Get a site\u2019s last cookie scan: state (queued, scanning, done, failed), scanId, durationMs, cookieCount, pagesVisited and error when it failed.",
-    { ...cbid, wait: z5.number().min(0).max(60).optional().describe("Seconds (\u226460) to wait for a running scan to settle before answering.") },
+    "Get a site\u2019s last cookie scan: state (idle when never scanned, queued, scanning, done, failed), scanId, durationMs, cookieCount, pagesVisited and error when it failed.",
+    { ...cbid, wait: z6.number().min(0).max(60).optional().describe("Seconds (\u226460) to wait for a running scan to settle before answering.") },
     (a) => a.wait !== void 0 ? client.sites.scanStatus(a.cbid, { wait: a.wait }) : client.sites.scanStatus(a.cbid)
   );
   tool(
@@ -1321,20 +1595,26 @@ ${JSON.stringify(r, null, 2)}` : r;
     "api_key_report",
     "Key hygiene: keys not used for a while, keys with broad (full or wide write) access, and keys expiring soon, each with the reason. Read-only.",
     {
-      unusedDays: z5.number().int().min(1).max(3650).optional().describe("Unused for at least this many days (default 90)."),
-      expiringDays: z5.number().int().min(1).max(3650).optional().describe("Expiring within this many days (default 14).")
+      unusedDays: z6.number().int().min(1).max(3650).optional().describe("Unused for at least this many days (default 90)."),
+      expiringDays: z6.number().int().min(1).max(3650).optional().describe("Expiring within this many days (default 14).")
     },
     (a) => client.keys.report({ ...a.unusedDays !== void 0 ? { unusedDays: a.unusedDays } : {}, ...a.expiringDays !== void 0 ? { expiringDays: a.expiringDays } : {} })
   );
   tool("get_usage", "Get the current usage/quota summary for your organization.", {}, () => client.usage());
+  tool(
+    "get_entitlements",
+    "What your organization may use, from its plan: every feature (whiteLabel, tcf, sso, abTesting, \u2026) as {key, enabled} and every limit as limits.<name> with limit (null = unlimited) and used. Read-only.",
+    {},
+    () => client.entitlements()
+  );
   tool("list_webhooks", "List webhook subscriptions for your organization.", {}, () => client.webhooks.list());
   tool(
     "create_webhook",
     "Create a webhook subscription. The response includes the signing secret (shown once).",
     {
-      url: z5.string().describe("HTTPS endpoint to deliver events to."),
-      events: z5.array(z5.string()).describe("Event names to subscribe to, e.g. consent.created."),
-      cbid: z5.string().optional().describe("Optional site cbid to scope the subscription to.")
+      url: z6.string().describe("HTTPS endpoint to deliver events to."),
+      events: z6.array(z6.string()).describe("Event names to subscribe to, e.g. consent.created."),
+      cbid: z6.string().optional().describe("Optional site cbid to scope the subscription to.")
     },
     (a) => client.webhooks.create({
       url: a.url,
@@ -1345,13 +1625,13 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "roll_webhook_secret",
     "Rotate a webhook subscription\u2019s signing secret. The new secret is returned once; the receiving endpoint must be updated to verify with it.",
-    { id: z5.string() },
+    { id: z6.string() },
     (a) => client.webhooks.rollSecret(a.id)
   );
   tool(
     "test_webhook",
     "Send a signed test event to a webhook subscription now, and report what the endpoint answered.",
-    { id: z5.string() },
+    { id: z6.string() },
     (a) => client.webhooks.test(a.id)
   );
   tool(
@@ -1363,40 +1643,48 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "replay_webhook_dead_letter",
     "Deliver a dead-lettered webhook event again, to the subscription as it is now.",
-    { id: z5.string() },
+    { id: z6.string() },
     (a) => client.webhooks.replayDeadLetter(a.id)
   );
+  tool(
+    "replay_webhook",
+    "Send what a failing or disabled webhook endpoint missed: its held events since `since` (its failingSince), oldest first, one attempt each, stopping at the first failure. Re-enable the endpoint first (update_webhook active:true).",
+    { id: z6.string(), since: z6.union([z6.number(), z6.string()]).describe("Epoch ms or ISO date."), limit: z6.number().int().min(1).max(500).optional() },
+    (a) => client.webhooks.replay(a.id, a.since, a.limit ? { limit: a.limit } : void 0)
+  );
   tool(
     "update_webhook",
-    "Change a webhook subscription, or pause it with active:false (delivery stops; the subscription is kept). Only the fields given change. cbid: null widens it to every property in the org.",
+    "Change a webhook subscription, or pause it with active:false (delivery stops; the subscription is kept). Only the fields given change. cbid: null widens it to every property in the org. active:true re-enables a disabled endpoint; the answer says how to replay what it missed. alertContacts: who is emailed when it fails (null: the org owners).",
     {
-      id: z5.string(),
-      url: z5.string().optional(),
-      events: z5.array(z5.string()).optional(),
-      cbid: z5.string().nullable().optional(),
-      active: z5.boolean().optional()
+      id: z6.string(),
+      url: z6.string().optional(),
+      events: z6.array(z6.string()).optional(),
+      cbid: z6.string().nullable().optional(),
+      active: z6.boolean().optional(),
+      alertContacts: z6.array(z6.string()).nullable().optional()
     },
     (a) => client.webhooks.update(a.id, {
       ...a.url !== void 0 ? { url: a.url } : {},
       ...a.events !== void 0 ? { events: a.events } : {},
       ...a.cbid !== void 0 ? { cbid: a.cbid } : {},
-      ...a.active !== void 0 ? { active: a.active } : {}
+      ...a.active !== void 0 ? { active: a.active } : {},
+      ...a.alertContacts !== void 0 ? { alertContacts: a.alertContacts } : {}
     })
   );
-  tool("delete_webhook", "Delete a webhook subscription by id.", { id: z5.string().describe("The webhook subscription id.") }, async (a) => {
+  tool("delete_webhook", "Delete a webhook subscription by id.", { id: z6.string().describe("The webhook subscription id.") }, async (a) => {
     await client.webhooks.delete(a.id);
     return { ok: true };
   });
   tool(
     "verify_site",
     "Verify that your organization controls a domain by one of three challenge methods (dns / meta / file). Required to unlock consent export and signed receipts.",
-    { ...cbid, method: z5.enum(["dns", "meta", "file"]).describe("Challenge method: dns (TXT record), meta (HTML tag), or file (/.well-known/cookiemunch-verify.txt).") },
+    { ...cbid, method: z6.enum(["dns", "meta", "file"]).describe("Challenge method: dns (TXT record), meta (HTML tag), or file (/.well-known/cookiemunch-verify.txt).") },
     (a) => client.sites.verify(a.cbid, a.method)
   );
   tool(
     "get_verification_challenge",
     "Exactly what to publish to prove control of a site\u2019s domain: the DNS TXT record, the meta tag, the file, or installing the embed. Read-only \u2014 publish one, then call verify_site.",
-    { cbid: z5.string() },
+    { cbid: z6.string() },
     (a) => client.sites.verifyChallenge(a.cbid)
   );
   tool(
@@ -1405,18 +1693,35 @@ ${JSON.stringify(r, null, 2)}` : r;
     { ...cbid },
     (a) => client.sites.brand(a.cbid)
   );
+  tool(
+    "get_site_brand",
+    "Read back the brand.json last imported for a site: each role (color.accent, font.body, logo.light, \u2026), the theme token it sets, whether the value in force is brand.json's or the site's own (the site wins), variants that override it, plus ignored[] and warnings[] (e.g. a third-party font host).",
+    { cbid: z6.string() },
+    (a) => client.sites.getBrand(a.cbid)
+  );
+  tool(
+    "import_site_brand",
+    "Import a DTCG brand.json into a site's banner theme (the hosted rights page uses it too). Pass url (https, fetched once) or document (the brand.json object). Values the site set itself are kept: brand.json < site banner theme < per-banner variant. dryRun answers the read-back and saves nothing.",
+    {
+      cbid: z6.string(),
+      url: z6.string().optional().describe("https URL of the brand.json. Give this or document."),
+      document: z6.record(z6.unknown()).optional().describe("The brand.json object itself. Give this or url."),
+      dryRun: z6.boolean().optional()
+    },
+    (a) => client.sites.setBrand(a.cbid, typeof a.url === "string" ? { url: a.url } : a.document ?? {}, { dryRun: a.dryRun === true })
+  );
   tool(
     "get_flow",
     "Get the v2 banner flow config for a site, including current views, categories, and any lint issues.",
-    { cbid: z5.string().describe("Site identifier (cbid).") },
+    { cbid: z6.string().describe("Site identifier (cbid).") },
     (a) => client.sites.getFlow(a.cbid)
   );
   tool(
     "edit_flow",
     "Apply a batch of structured edit operations to a site's v2 banner flow. All ops are validated server-side and the final config must be lint-clean before it is saved.",
     {
-      cbid: z5.string().describe("Site identifier (cbid)."),
-      operations: z5.array(z5.record(z5.unknown())).describe(
+      cbid: z6.string().describe("Site identifier (cbid)."),
+      operations: z6.array(z6.record(z6.unknown())).describe(
         'Ordered list of ops. Each must have an "op" field: addView | removeView | addElement | setButtonTransition | addCustomCategory.'
       )
     },
@@ -1426,22 +1731,23 @@ ${JSON.stringify(r, null, 2)}` : r;
     "set_flow",
     "Wholesale replace a site's v2 banner flow with a complete config (e.g. from a template). Validated server-side before it is saved.",
     {
-      cbid: z5.string().describe("Site identifier (cbid)."),
-      config: z5.record(z5.unknown()).describe("A full v2 FlowConfig object ({ v:2, flow, categories, ... }).")
+      cbid: z6.string().describe("Site identifier (cbid)."),
+      config: z6.record(z6.unknown()).describe("A full v2 FlowConfig object ({ v:2, flow, categories, ... }).")
     },
     (a) => client.sites.setFlow(a.cbid, a.config)
   );
   registerConfigTools(tool, client);
   registerPlatformTools(tool, client);
   registerIntegrationTools(tool, client);
+  registerKeyAndTagTools(tool, client);
   registerRightsTools(tool, client);
   registerRightsPageTools(tool, client);
   tool(
     "invite_member",
     "Invite a person to your organization by email. role must be admin, member, or viewer. The org is derived from the API key \u2014 you cannot invite into a different org.",
     {
-      email: z5.string().describe("Email address of the person to invite."),
-      role: z5.enum(["admin", "member", "viewer"]).describe("Role to assign: admin, member, or viewer. owner is not assignable via API key.")
+      email: z6.string().describe("Email address of the person to invite."),
+      role: z6.enum(["admin", "member", "viewer"]).describe("Role to assign: admin, member, or viewer. owner is not assignable via API key.")
     },
     (a) => client.members.invite(a.email, a.role)
   );
@@ -1449,8 +1755,8 @@ ${JSON.stringify(r, null, 2)}` : r;
     "set_member_role",
     "Change the role of a member in your organization. The org owner's role cannot be changed.",
     {
-      userId: z5.string().describe("The userId of the member whose role to change."),
-      role: z5.enum(["admin", "member", "viewer"]).describe("New role: admin, member, or viewer.")
+      userId: z6.string().describe("The userId of the member whose role to change."),
+      role: z6.enum(["admin", "member", "viewer"]).describe("New role: admin, member, or viewer.")
     },
     (a) => client.members.setRole(a.userId, a.role)
   );
@@ -1458,7 +1764,7 @@ ${JSON.stringify(r, null, 2)}` : r;
     "remove_member",
     "Remove a member from your organization. The org owner cannot be removed.",
     {
-      userId: z5.string().describe("The userId of the member to remove.")
+      userId: z6.string().describe("The userId of the member to remove.")
     },
     async (a) => {
       await client.members.remove(a.userId);
@@ -1469,11 +1775,11 @@ ${JSON.stringify(r, null, 2)}` : r;
     "create_brand_kit",
     "Create a reusable brand kit (colors, logo, typography) for your organization's consent banners.",
     {
-      name: z5.string().describe("Display name for the brand kit."),
-      theme: z5.record(z5.unknown()).describe("Theme tokens (colors, fonts, etc.) as a JSON object."),
-      content: z5.record(z5.unknown()).optional().describe("Optional banner copy overrides."),
-      logoUrl: z5.string().optional().describe("Optional URL for your org logo."),
-      customCss: z5.string().optional().describe("Optional custom CSS string to inject into the banner.")
+      name: z6.string().describe("Display name for the brand kit."),
+      theme: z6.record(z6.unknown()).describe("Theme tokens (colors, fonts, etc.) as a JSON object."),
+      content: z6.record(z6.unknown()).optional().describe("Optional banner copy overrides."),
+      logoUrl: z6.string().optional().describe("Optional URL for your org logo."),
+      customCss: z6.string().optional().describe("Optional custom CSS string to inject into the banner.")
     },
     (a) => client.brandKits.create({
       name: a.name,
@@ -1487,7 +1793,7 @@ ${JSON.stringify(r, null, 2)}` : r;
     "delete_brand_kit",
     "Delete a brand kit by id. The kit must belong to your organization (cross-org deletes are rejected).",
     {
-      id: z5.string().describe("The brand kit id to delete.")
+      id: z6.string().describe("The brand kit id to delete.")
     },
     async (a) => {
       await client.brandKits.delete(a.id);
@@ -1498,25 +1804,25 @@ ${JSON.stringify(r, null, 2)}` : r;
     "save_preference",
     "Save or update the consent preferences for an end-user (by subjectId) within your organization. purposes is a map of purpose-name \u2192 boolean.",
     {
-      subjectId: z5.string().describe("The end-user identifier (e.g. email or internal user id)."),
-      purposes: z5.record(z5.boolean()).describe('Map of purpose names to consent values, e.g. { "newsletter": true, "analytics": false }.')
+      subjectId: z6.string().describe("The end-user identifier (e.g. email or internal user id)."),
+      purposes: z6.record(z6.boolean()).describe('Map of purpose names to consent values, e.g. { "newsletter": true, "analytics": false }.')
     },
     (a) => client.preferences.save(a.subjectId, a.purposes)
   );
   tool(
     "get_preference",
     "One end-user\u2019s saved preferences, by subjectId. Read-only.",
-    { subjectId: z5.string() },
+    { subjectId: z6.string() },
     (a) => client.preferences.get(a.subjectId)
   );
   tool(
     "mint_preference_center_token",
     "Mint a hosted preference-centre token for one visitor (POST /v1/preference-center/tokens), for a page to pass to CookieMunch.setSubjectToken. Give exactly one of email (resolved as the emailed preference link resolves it; an unknown address is subject_not_found) or subjectId. The token is a credential that opens that person\u2019s subscriptions and profile until expiresAt: never paste it into a shared URL, a ticket or a log, and keep ttlSeconds short (default 3600, max 86400). Needs subscriptions:write and profile:write, plus identity:read by email.",
     {
-      cbid: z5.string().describe("A site of your organisation."),
-      email: z5.string().optional().describe("The visitor\u2019s address. Give this or subjectId, not both."),
-      subjectId: z5.string().optional().describe("The subject id. Give this or email, not both."),
-      ttlSeconds: z5.number().int().min(1).max(86400).optional()
+      cbid: z6.string().describe("A site of your organisation."),
+      email: z6.string().optional().describe("The visitor\u2019s address. Give this or subjectId, not both."),
+      subjectId: z6.string().optional().describe("The subject id. Give this or email, not both."),
+      ttlSeconds: z6.number().int().min(1).max(86400).optional()
     },
     (a) => client.preferenceCenter.mintToken({
       cbid: a.cbid,
@@ -1526,15 +1832,19 @@ ${JSON.stringify(r, null, 2)}` : r;
   );
   tool(
     "issue_api_key",
-    "Issue a new API key. The secret is returned once and never again. Prefer the least privilege the job needs: `scopes` limits what it can do, `cbids` locks it to specific sites (it then cannot reach anything org-wide), `expiresInDays` retires it. Omitting all three mints a full-access, org-wide, non-expiring key.",
+    "Issue a new API key. The secret is returned once and never again. Prefer the least privilege the job needs: `scopes` limits what it can do, `cbids` locks it to specific sites (it then cannot reach anything org-wide), `expiresInDays` retires it. Omitting all three mints a full-access, org-wide, non-expiring key (the answer warns about it). For a sub-task, vend_api_key mints a short-lived one instead.",
     {
-      name: z5.string().optional(),
-      scopes: z5.array(z5.string()).optional(),
-      cbids: z5.array(z5.string()).min(1).optional(),
-      expiresInDays: z5.number().int().min(1).max(3650).optional(),
-      expiresAt: z5.string().optional().describe("Or the exact expiry, an ISO date-time (not with expiresInDays).")
+      name: z6.string().optional(),
+      scopes: z6.array(z6.string()).optional(),
+      cbids: z6.array(z6.string()).min(1).optional(),
+      expiresInDays: z6.number().int().min(1).max(3650).optional(),
+      expiresAt: z6.string().optional().describe("Or the exact expiry, an ISO date-time (not with expiresInDays)."),
+      owner: z6.string().optional().describe("Who it belongs to: user:<id>, service:<name> or apikey:<prefix>. Default this key."),
+      strictUnknownFields: z6.boolean().optional().describe("Writes with the new key refuse unknown body fields by default.")
     },
     (a) => client.keys.issue({
+      ...a.owner ? { owner: a.owner } : {},
+      ...a.strictUnknownFields !== void 0 ? { strictUnknownFields: a.strictUnknownFields } : {},
       ...a.expiresAt ? { expiresAt: a.expiresAt } : {},
       ...a.name ? { name: a.name } : {},
       ...a.scopes ? { scopes: a.scopes } : {},
@@ -1542,36 +1852,36 @@ ${JSON.stringify(r, null, 2)}` : r;
       ...a.expiresInDays !== void 0 ? { expiresInDays: a.expiresInDays } : {}
     })
   );
-  tool("revoke_api_key", "Revoke an API key by its prefix. Takes effect immediately; anything using that key stops working.", { prefix: z5.string() }, async (a) => {
+  tool("revoke_api_key", "Revoke an API key by its prefix. Takes effect immediately; anything using that key stops working.", { prefix: z6.string() }, async (a) => {
     await client.keys.revoke(a.prefix);
     return { revoked: a.prefix };
   });
   tool(
     "import_cookie_declaration",
     "Read a cookie declaration exported from another CMP (OneTrust, Cookiebot, CookieYes, or any CSV/JSON with the same columns) and translate its categories into ours. Nothing is applied \u2014 it comes back for review, with the rows whose category could not be placed listed separately.",
-    { cbid: z5.string(), data: z5.string().describe("The exported file, as text (CSV or JSON).") },
+    { cbid: z6.string(), data: z6.string().describe("The exported file, as text (CSV or JSON).") },
     (a) => client.sites.importDeclaration(a.cbid, a.data)
   );
   tool(
     "apply_cookie_import",
     "Import a cookie declaration exported from another CMP AND declare it: every row whose category mapped to ours and that has a purpose becomes a site declaration; the rest come back in `skipped` with the reason. Cookies the site already declared are kept unless overwrite is true. Prefer import_cookie_declaration first to review.",
-    { cbid: z5.string(), data: z5.string().describe("The exported file, as text (CSV or JSON)."), overwrite: z5.boolean().optional() },
+    { cbid: z6.string(), data: z6.string().describe("The exported file, as text (CSV or JSON)."), overwrite: z6.boolean().optional() },
     (a) => client.sites.applyImport(a.cbid, a.data, a.overwrite ? { overwrite: true } : void 0)
   );
   const declarationShape = {
-    category: z5.string().describe("necessary, preferences, statistics, marketing, or one of the site\u2019s categories.custom ids."),
-    purpose: z5.string().describe("What the cookie does, as visitors will read it \u2014 and the fallback for any language purposes lacks."),
-    purposes: z5.record(z5.string(), z5.string().max(1e3)).nullable().optional().describe('The purpose in other languages, keyed by BCP-47 tag: {"es": "\u2026", "pt-BR": "\u2026"}. The banner, data-cc="declaration" and cookie-declaration.js draw the visitor\u2019s language. null clears.'),
-    provider: z5.string().optional(),
-    expiry: z5.string().optional().describe('e.g. "Session", "30 days", "1 year" (the banner localises these forms).'),
-    domain: z5.string().optional(),
-    pattern: z5.boolean().optional().describe("Treat the name as a prefix wildcard (a trailing * does the same).")
+    category: z6.string().describe("necessary, preferences, statistics, marketing, or one of the site\u2019s categories.custom ids."),
+    purpose: z6.string().describe("What the cookie does, as visitors will read it \u2014 and the fallback for any language purposes lacks."),
+    purposes: z6.record(z6.string(), z6.string().max(1e3)).nullable().optional().describe('The purpose in other languages, keyed by BCP-47 tag: {"es": "\u2026", "pt-BR": "\u2026"}. The banner, data-cc="declaration" and cookie-declaration.js draw the visitor\u2019s language. null clears.'),
+    provider: z6.string().optional(),
+    expiry: z6.string().optional().describe('e.g. "Session", "30 days", "1 year" (the banner localises these forms).'),
+    domain: z6.string().optional(),
+    pattern: z6.boolean().optional().describe("Treat the name as a prefix wildcard (a trailing * does the same).")
   };
-  const dryRunArg = z5.boolean().optional().describe("Store nothing: answer with the would-be declarations and a diff (added / removed / changed) to check first.");
+  const dryRunArg = z6.boolean().optional().describe("Store nothing: answer with the would-be declarations and a diff (added / removed / changed) to check first.");
   tool(
     "declare_cookie",
     'Declare what one of the site\u2019s cookies is. Overrides the scanner, observed visits and the cookie database everywhere the declaration is shown (API, preference modal, data-cc="declaration"). Use for the site\u2019s own cookies the database cannot know. A name ending in * covers every cookie with that prefix.',
-    { cbid: z5.string(), name: z5.string(), ...declarationShape, dryRun: dryRunArg },
+    { cbid: z6.string(), name: z6.string(), ...declarationShape, dryRun: dryRunArg },
     (a) => {
       const { cbid: cbid2, name, dryRun, ...rest } = a;
       return client.sites.declareCookie(cbid2, name, rest, dryRun ? { dryRun: true } : void 0);
@@ -1580,7 +1890,7 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "declare_cookies",
     "Declare many cookies at once. All-or-nothing: one invalid item refuses the whole request and nothing is saved. replace: true also removes every declaration the list does not name.",
-    { cbid: z5.string(), cookies: z5.array(z5.object({ name: z5.string(), ...declarationShape })).max(500), replace: z5.boolean().optional(), dryRun: dryRunArg },
+    { cbid: z6.string(), cookies: z6.array(z6.object({ name: z6.string(), ...declarationShape })).max(500), replace: z6.boolean().optional(), dryRun: dryRunArg },
     (a) => {
       const o = { ...a.replace ? { replace: true } : {}, ...a.dryRun ? { dryRun: true } : {} };
       return client.sites.declareCookies(a.cbid, a.cookies, Object.keys(o).length ? o : void 0);
@@ -1589,7 +1899,7 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "undeclare_cookie",
     "Remove a cookie declaration; the scanned/observed classification applies again.",
-    { cbid: z5.string(), name: z5.string(), dryRun: dryRunArg },
+    { cbid: z6.string(), name: z6.string(), dryRun: dryRunArg },
     async (a) => {
       if (a.dryRun) return client.sites.undeclareCookie(a.cbid, a.name, { dryRun: true });
       await client.sites.undeclareCookie(a.cbid, a.name);
@@ -1600,11 +1910,11 @@ ${JSON.stringify(r, null, 2)}` : r;
     "retire_cookie",
     'Retire a cookie the site renamed or stopped setting: it leaves the banner\u2019s cookie list, data-cc="declaration" and the public feed, and stays listed for the owner with retired. A name ending in * retires every cookie with that prefix; the name must match a scanned, observed or declared cookie. If a crawl or a real visit sees it again afterwards, it is listed again with review: retired_but_seen.',
     {
-      cbid: z5.string(),
-      name: z5.string(),
-      renamedTo: z5.string().max(256).optional().describe("The cookie\u2019s new name, if it was renamed."),
-      note: z5.string().max(1e3).optional(),
-      dryRun: z5.boolean().optional().describe("Store nothing: answer with the would-be retirement and list to check first.")
+      cbid: z6.string(),
+      name: z6.string(),
+      renamedTo: z6.string().max(256).optional().describe("The cookie\u2019s new name, if it was renamed."),
+      note: z6.string().max(1e3).optional(),
+      dryRun: z6.boolean().optional().describe("Store nothing: answer with the would-be retirement and list to check first.")
     },
     (a) => {
       const input = { ...a.renamedTo ? { renamedTo: a.renamedTo } : {}, ...a.note ? { note: a.note } : {} };
@@ -1614,7 +1924,7 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "unretire_cookie",
     "Un-retire a cookie: it is listed again everywhere.",
-    { cbid: z5.string(), name: z5.string(), dryRun: z5.boolean().optional().describe("Store nothing: answer with what the list would be.") },
+    { cbid: z6.string(), name: z6.string(), dryRun: z6.boolean().optional().describe("Store nothing: answer with what the list would be.") },
     async (a) => {
       if (a.dryRun) return client.sites.unretireCookie(a.cbid, a.name, { dryRun: true });
       await client.sites.unretireCookie(a.cbid, a.name);
@@ -1623,41 +1933,74 @@ ${JSON.stringify(r, null, 2)}` : r;
   );
   tool(
     "list_cookie_presets",
-    "Declaration presets for the platforms a site is built on (atlas, forumulate, chatly, cookiemunch, referally): each one\u2019s parameters, what it has declared on this site, and whether the vendor\u2019s live manifest can be imported yet. Read-only.",
-    { cbid: z5.string() },
+    "Declaration presets for the platforms a site is built on (atlas, forumulate, chatly, cookiemunch, referalli, firstpromoter, partnerstack, tapfiliate, impact): each one\u2019s parameters, what it has declared on this site, and whether the vendor\u2019s live manifest can be imported yet. Read-only.",
+    { cbid: z6.string() },
     (a) => client.sites.cookiePresets(a.cbid)
   );
   tool(
     "apply_cookie_preset",
-    "Apply (or re-sync) a vendor preset: declares exactly what that platform writes \u2014 cookies and browser storage, with domain and lifetime \u2014 marked as declared by that vendor. Re-applying removes keys the vendor no longer writes. Names the owner declared are kept (skipped). Atlas needs frontendApiHost (and crossSubdomainCookies, default true); Chatly needs publicId.",
+    "Apply (or re-sync) a vendor preset: declares exactly what that platform writes \u2014 cookies and browser storage, with domain and lifetime \u2014 marked as declared by that vendor. Re-applying removes keys the vendor no longer writes. Names the owner declared are kept (skipped). Atlas needs frontendApiHost (and crossSubdomainCookies, default true); Chatly needs publicId. A row filed under a disabled category comes back in warnings with a suggestedConfigPatch.",
     {
-      cbid: z5.string(),
-      vendor: z5.enum(["atlas", "forumulate", "chatly", "cookiemunch", "referally"]),
-      frontendApiHost: z5.string().optional().describe("Atlas: your frontend API host, e.g. auth.example.com."),
-      crossSubdomainCookies: z5.boolean().optional().describe("Atlas: default true \u2014 the cookies live on the parent domain."),
-      publicId: z5.string().optional().describe("Chatly: the channel public id (ch_web_\u2026)."),
-      dragging: z5.boolean().optional().describe("Chatly: the launcher can be dragged (adds the drag-position key)."),
-      category: z5.string().optional().describe("Chatly: the category for its keys (default necessary). Referally: default the site's referrals category, else marketing."),
-      cookieDomain: z5.string().optional().describe("Referally: the domain aff.js sets referally_ctx on, e.g. .example.com. Default the site domain."),
-      cookieDays: z5.number().int().min(1).max(400).optional().describe("Referally: how long the cookie lives, 1 to 400 days. Default 60."),
+      cbid: z6.string(),
+      vendor: z6.enum(["atlas", "forumulate", "chatly", "cookiemunch", "referalli", "firstpromoter", "partnerstack", "tapfiliate", "impact", "referally"]).describe("referally is the deprecated old name of referalli."),
+      frontendApiHost: z6.string().optional().describe("Atlas: your frontend API host, e.g. auth.example.com."),
+      crossSubdomainCookies: z6.boolean().optional().describe("Atlas: default true \u2014 the cookies live on the parent domain."),
+      publicId: z6.string().optional().describe("Chatly: the channel public id (ch_web_\u2026)."),
+      dragging: z6.boolean().optional().describe("Chatly: the launcher can be dragged (adds the drag-position key)."),
+      category: z6.string().optional().describe("Chatly: the category for its keys (default necessary). Referral and affiliate presets: default the site's referrals category, else marketing."),
+      cookieDomain: z6.string().optional().describe("Referral and affiliate presets: the domain their script sets its cookies on, e.g. .example.com. Default the site domain."),
+      cookieDays: z6.number().int().min(1).max(400).optional().describe("Referral and affiliate presets: your program's cookie window, 1 to 400 days."),
+      legacyName: z6.boolean().optional().describe("referalli: default true, also declare referally_ctx (the pre-rename copy aff.js still writes)."),
+      campaignId: z6.string().optional().describe("impact: your program id; declares IR_<campaignId> too."),
       dryRun: dryRunArg
     },
     (a) => {
       const params = {};
-      for (const k of ["frontendApiHost", "crossSubdomainCookies", "publicId", "dragging", "category", "cookieDomain", "cookieDays"]) if (a[k] !== void 0) params[k] = a[k];
+      for (const k of ["frontendApiHost", "crossSubdomainCookies", "publicId", "dragging", "category", "cookieDomain", "cookieDays", "legacyName", "campaignId"]) if (a[k] !== void 0) params[k] = a[k];
       return client.sites.applyCookiePreset(a.cbid, a.vendor, params, a.dryRun ? { dryRun: true } : void 0);
     }
   );
+  tool(
+    "import_cookie_manifest",
+    'Declare ANY vendor\u2019s cookies and browser storage from its embed manifest (/.well-known/forgedeck-embed.json): give its https URL (re-read hourly afterwards) or the manifest document. The vendor id is the manifest\u2019s product; rows are marked source "manifest". An invalid manifest is refused with each broken rule named. Use dryRun first; remove it with remove_cookie_preset and the product id.',
+    {
+      cbid: z6.string(),
+      url: z6.string().optional().describe("An https:// embed manifest URL."),
+      manifest: z6.record(z6.unknown()).optional().describe("The manifest document itself, instead of a URL."),
+      params: z6.record(z6.string()).optional().describe('Values for the manifest\u2019s {placeholders}, e.g. {"publicId": "ch_web_1"}.'),
+      dryRun: dryRunArg
+    },
+    (a) => {
+      const input = a.url !== void 0 ? { url: a.url } : { manifest: a.manifest };
+      return client.sites.importCookieManifest(a.cbid, { ...input, ...a.params ? { params: a.params } : {} }, a.dryRun ? { dryRun: true } : void 0);
+    }
+  );
+  tool(
+    "list_cookie_suggestions",
+    "What a site should declare: the vendors its crawls and visits show (by script URL, storage name or embed manifest), the preset for each, and one suggestion per undeclared cookie or storage key with a suggested category, confidence, and whether a crawl saw it before consent (consentStates). Read-only.",
+    { cbid: z6.string() },
+    (a) => client.sites.cookieSuggestions(a.cbid)
+  );
+  tool(
+    "declare_cookie_suggestions",
+    "Declare a site\u2019s suggestions in one call: applies detected vendors\u2019 presets that need no parameters and declares every other suggestion that has a purpose. Run with dryRun first to see the diff. names limits it to those suggestions; presets: false declares rows one by one instead.",
+    { cbid: z6.string(), names: z6.array(z6.string()).optional(), presets: z6.boolean().optional(), dryRun: dryRunArg },
+    (a) => client.sites.declareCookieSuggestions(
+      a.cbid,
+      { ...a.names ? { names: a.names } : {}, ...a.presets !== void 0 ? { presets: a.presets } : {} },
+      a.dryRun ? { dryRun: true } : void 0
+    )
+  );
   tool(
     "remove_cookie_preset",
-    "Remove every declaration a vendor preset made on this site.",
-    { cbid: z5.string(), vendor: z5.enum(["atlas", "forumulate", "chatly", "cookiemunch", "referally"]), dryRun: dryRunArg },
+    "Remove every declaration a vendor preset made on this site: a first-class preset, or a custom one (import_cookie_manifest) by its product id.",
+    { cbid: z6.string(), vendor: z6.string().describe("atlas, forumulate, chatly, cookiemunch, referalli, firstpromoter, partnerstack, tapfiliate, impact (referally is an alias of referalli), or a custom preset's product id."), dryRun: dryRunArg },
     (a) => client.sites.removeCookiePreset(a.cbid, a.vendor, a.dryRun ? { dryRun: true } : void 0)
   );
   tool(
     "delete_observed_cookie",
     "Remove every stored row of this name that crawls or real visits put in the site\u2019s cookie list (e.g. a name someone reported that the site never sets). A declaration of it stays. If real visits keep reporting it, it comes back quarantined.",
-    { cbid: z5.string(), name: z5.string(), dryRun: dryRunArg },
+    { cbid: z6.string(), name: z6.string(), dryRun: dryRunArg },
     async (a) => {
       if (a.dryRun) return client.sites.deleteObservedCookie(a.cbid, a.name, { dryRun: true });
       await client.sites.deleteObservedCookie(a.cbid, a.name);
@@ -1668,9 +2011,9 @@ ${JSON.stringify(r, null, 2)}` : r;
     "purge_observed_cookies",
     "Purge observed since T: remove every row a real visit first reported at or after `since` (and before `until`). Crawled rows and declarations stay. Rows from before provenance was recorded use their last-seen time, so run with dryRun first.",
     {
-      cbid: z5.string(),
-      since: z5.union([z5.string(), z5.number()]).describe("ISO-8601 time or epoch milliseconds."),
-      until: z5.union([z5.string(), z5.number()]).optional().describe("Optional end of the window (exclusive)."),
+      cbid: z6.string(),
+      since: z6.union([z6.string(), z6.number()]).describe("ISO-8601 time or epoch milliseconds."),
+      until: z6.union([z6.string(), z6.number()]).optional().describe("Optional end of the window (exclusive)."),
       dryRun: dryRunArg
     },
     (a) => client.sites.purgeObservedCookies(
@@ -1682,24 +2025,24 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "get_blocked_pages",
     "Pages where the embed could not load its banner renderer \u2014 the page\u2019s Content Security Policy or Trusted Types policy refused it, so nobody there can be asked for consent. An empty list is healthy. Read-only.",
-    { cbid: z5.string() },
+    { cbid: z6.string() },
     (a) => client.sites.blocked(a.cbid)
   );
   tool(
     "roll_api_key",
     "Rotate an API key: returns a new secret once, with the same name, scopes, property lock and expiry. The old secret stops working immediately \u2014 if it is the key this server runs with, this server stops working too until it is reconfigured.",
-    { prefix: z5.string() },
+    { prefix: z6.string() },
     (a) => client.keys.roll(a.prefix)
   );
   tool(
     "update_api_key",
     "Rename an API key, replace its scopes or the properties it is locked to, or set or remove its expiry. Only the fields given change; the secret does not.",
     {
-      prefix: z5.string(),
-      name: z5.string().optional(),
-      scopes: z5.array(z5.string()).optional(),
-      cbids: z5.array(z5.string()).min(1).optional(),
-      expiresAt: z5.string().nullable().optional().describe("A new expiry (ISO date-time), or null to remove it.")
+      prefix: z6.string(),
+      name: z6.string().optional(),
+      scopes: z6.array(z6.string()).optional(),
+      cbids: z6.array(z6.string()).min(1).optional(),
+      expiresAt: z6.string().nullable().optional().describe("A new expiry (ISO date-time), or null to remove it.")
     },
     (a) => client.keys.update(a.prefix, {
       ...a.expiresAt !== void 0 ? { expiresAt: a.expiresAt } : {},
@@ -1712,7 +2055,7 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "update_org",
     "Rename your organisation or set its logo. logoUrl: null removes the logo; upload an image with upload_asset to get a URL. Deleting the organisation is not possible here.",
-    { name: z5.string().min(1).optional(), logoUrl: z5.string().nullable().optional() },
+    { name: z6.string().min(1).optional(), logoUrl: z6.string().nullable().optional() },
     (a) => client.org.update({
       ...a.name !== void 0 ? { name: a.name } : {},
       ...a.logoUrl !== void 0 ? { logoUrl: a.logoUrl } : {}
@@ -1728,20 +2071,20 @@ ${JSON.stringify(r, null, 2)}` : r;
     "set_mail_provider",
     "Connect your own mail provider for rights-request mail \u2014 recommended, so codes come from your own domain. Replaces the stored one. It carries mail only after test_mail_provider succeeds; every save clears that. Omit secret to keep the stored one (same provider only).",
     {
-      provider: z5.enum(["brevo", "sendgrid", "postmark", "resend", "ses", "smtp"]),
-      fromEmail: z5.string().describe("An address on a domain your provider has verified."),
-      fromName: z5.string().max(100).nullable().optional(),
-      replyTo: z5.string().nullable().optional(),
-      secret: z5.string().optional().describe("API key (Brevo, SendGrid, Resend), server token (Postmark), secret access key (SES) or SMTP password. Write-only."),
-      ses: z5.object({ region: z5.string(), accessKeyId: z5.string() }).optional().describe("Required for ses."),
-      smtp: z5.object({ host: z5.string(), port: z5.union([z5.literal(25), z5.literal(465), z5.literal(587), z5.literal(2525)]), security: z5.enum(["tls", "starttls"]), username: z5.string() }).optional().describe("Required for smtp. TLS is always required.")
+      provider: z6.enum(["brevo", "sendgrid", "postmark", "resend", "ses", "smtp"]),
+      fromEmail: z6.string().describe("An address on a domain your provider has verified."),
+      fromName: z6.string().max(100).nullable().optional(),
+      replyTo: z6.string().nullable().optional(),
+      secret: z6.string().optional().describe("API key (Brevo, SendGrid, Resend), server token (Postmark), secret access key (SES) or SMTP password. Write-only."),
+      ses: z6.object({ region: z6.string(), accessKeyId: z6.string() }).optional().describe("Required for ses."),
+      smtp: z6.object({ host: z6.string(), port: z6.union([z6.literal(25), z6.literal(465), z6.literal(587), z6.literal(2525)]), security: z6.enum(["tls", "starttls"]), username: z6.string() }).optional().describe("Required for smtp. TLS is always required.")
     },
     (a) => client.org.mailProvider.set(a)
   );
   tool(
     "test_mail_provider",
     "Send a test message through your own mail provider (never Cookie Munch\u2019s) and report what it answered. Success marks the configuration verified, after which it carries all rights mail.",
-    { to: z5.string().optional().describe("Recipient. Default: the reply-to, else the from address.") },
+    { to: z6.string().optional().describe("Recipient. Default: the reply-to, else the from address.") },
     (a) => client.org.mailProvider.test(a.to)
   );
   tool(
@@ -1763,10 +2106,10 @@ ${JSON.stringify(r, null, 2)}` : r;
     "set_org_controller",
     "Set the organisation\u2019s data-controller identity. Replaces it: a field left out is removed. Needed for a notice on a rights request filed without a cbid when the organisation has several sites. Needs an unscoped key or rights:write. Audited.",
     {
-      legalName: z5.string().describe("Required: the legal name of the data controller."),
-      contactEmail: z5.string().optional().describe("Where people reach the controller about their data."),
-      address: z5.string().optional(),
-      dpoContact: z5.string().optional().describe("The Data Protection Officer: a name, an email address, or both.")
+      legalName: z6.string().describe("Required: the legal name of the data controller."),
+      contactEmail: z6.string().optional().describe("Where people reach the controller about their data."),
+      address: z6.string().optional(),
+      dpoContact: z6.string().optional().describe("The Data Protection Officer: a name, an email address, or both.")
     },
     (a) => client.org.controller.set({
       legalName: a.legalName,
@@ -1786,11 +2129,11 @@ ${JSON.stringify(r, null, 2)}` : r;
   );
   const CAPTCHA_OFF = "Off removes spam protection beyond the hidden spam-trap field, the rate limits and the email code: expect more spam requests. Own keys are recommended.";
   const captchaInput = {
-    mode: z5.enum(["own", "off"]).describe(`own: your own captcha provider keys (recommended). off: no captcha. ${CAPTCHA_OFF}`),
-    provider: z5.enum(["turnstile", "hcaptcha", "recaptcha_v2", "recaptcha_v3"]).optional().describe("Required for own."),
-    siteKey: z5.string().optional().describe("Required for own: the public site key. List your rights-page hostnames on it at the provider."),
-    secret: z5.string().optional().describe("The provider secret key. Write-only; never returned. Omit to keep the stored one (same provider)."),
-    minScore: z5.number().min(0.1).max(0.9).optional().describe("reCAPTCHA v3 only. Default 0.5.")
+    mode: z6.enum(["own", "off"]).describe(`own: your own captcha provider keys (recommended). off: no captcha. ${CAPTCHA_OFF}`),
+    provider: z6.enum(["turnstile", "hcaptcha", "recaptcha_v2", "recaptcha_v3"]).optional().describe("Required for own."),
+    siteKey: z6.string().optional().describe("Required for own: the public site key. List your rights-page hostnames on it at the provider."),
+    secret: z6.string().optional().describe("The provider secret key. Write-only; never returned. Omit to keep the stored one (same provider)."),
+    minScore: z6.number().min(0.1).max(0.9).optional().describe("reCAPTCHA v3 only. Default 0.5.")
   };
   const captchaBody = (a) => ({
     mode: a.mode,
@@ -1802,37 +2145,37 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "get_consent_sync_secret",
     "Whether hosted consent sync is set up for a site: `configured`, `secretLast4`, `createdAt`. Never returns the secret. Read-only.",
-    { cbid: z5.string() },
+    { cbid: z6.string() },
     (a) => client.consentSyncSecret.get(a.cbid)
   );
   tool(
     "rotate_consent_sync_secret",
     "Mint a site\u2019s consent-sync signing secret, or rotate it. The answer carries `secret` this once; the site owner\u2019s server signs consent-sync tokens with it (mintConsentSyncToken in @cookiemunch/sdk). Rotating stops the old secret at once, so every page holding a token signed with it stops syncing until it gets a new token. Never put the secret in a page. Needs sites:write and consent:write.",
-    { cbid: z5.string() },
+    { cbid: z6.string() },
     (a) => client.consentSyncSecret.rotate(a.cbid)
   );
   tool(
     "remove_consent_sync_secret",
     "Remove a site\u2019s consent-sync secret: hosted consent sync stops until a new one is minted. Needs sites:write and consent:write.",
-    { cbid: z5.string() },
+    { cbid: z6.string() },
     (a) => client.consentSyncSecret.remove(a.cbid)
   );
   tool(
     "get_rights_captcha",
     "The captcha on a site\u2019s hosted rights page: its own setting, else the organisation default, else off (`source` says which). Never returns the secret. Read-only.",
-    { cbid: z5.string() },
+    { cbid: z6.string() },
     (a) => client.rightsCaptcha.get(a.cbid)
   );
   tool(
     "set_rights_captcha",
     `Set a site\u2019s rights-page captcha: your own Turnstile, hCaptcha or reCAPTCHA keys (recommended; the provider must accept the secret before it is saved), or off. ${CAPTCHA_OFF} Audited with the old and new mode.`,
-    { cbid: z5.string(), ...captchaInput },
+    { cbid: z6.string(), ...captchaInput },
     (a) => client.rightsCaptcha.set(a.cbid, captchaBody(a))
   );
   tool(
     "remove_rights_captcha",
     "Remove a site\u2019s own captcha setting: it inherits the organisation default again (or off). Returns the setting now in force.",
-    { cbid: z5.string() },
+    { cbid: z6.string() },
     (a) => client.rightsCaptcha.remove(a.cbid)
   );
   tool(
@@ -1855,15 +2198,15 @@ ${JSON.stringify(r, null, 2)}` : r;
   );
   const IDENTITY_NOTE = "The JWKS is fetched and checked before anything is saved. The session token must carry the email and a verified-email claim (default email_verified) set to true (Clerk: add email: {{user.primary_email_address}} to the session token; Clerk documents no claim for whether that address is verified, so either add your own or set trustEmailClaim). oidc_jwt needs an audience or authorizedParties.";
   const identityInput = {
-    type: z5.enum(["clerk", "atlas", "oidc_jwt"]).describe("clerk, atlas (Clerk-shaped), or oidc_jwt (any issuer that signs session JWTs with a published JWKS)."),
-    issuer: z5.string().describe("https URL exactly as in the token\u2019s iss (Clerk: your Frontend API URL)."),
-    jwksUrl: z5.string().optional().describe("Required for oidc_jwt; clerk/atlas default to <issuer>/.well-known/jwks.json."),
-    audience: z5.string().optional().describe("Expected aud. For oidc_jwt an audience or authorizedParties is required (a shared issuer mints tokens for every app)."),
-    authorizedParties: z5.array(z5.string()).optional().describe("Your own origins (https://www.example.com) the token\u2019s azp must be one of. Required for clerk and atlas; for oidc_jwt when there is no audience."),
-    emailClaim: z5.string().optional().describe("Default email."),
-    emailVerifiedClaim: z5.string().optional().describe("Default email_verified; must be exactly true."),
-    sessionCookieName: z5.string().optional().describe("Default __session: the cookie the hosted page on your custom domain reads."),
-    trustEmailClaim: z5.boolean().optional().describe("clerk/atlas only, default false. True: a token without the verified claim is accepted, its email claim taken as verified. Set only if every address your provider puts in that claim is verified.")
+    type: z6.enum(["clerk", "atlas", "oidc_jwt"]).describe("clerk, atlas (Clerk-shaped), or oidc_jwt (any issuer that signs session JWTs with a published JWKS)."),
+    issuer: z6.string().describe("https URL exactly as in the token\u2019s iss (Clerk: your Frontend API URL)."),
+    jwksUrl: z6.string().optional().describe("Required for oidc_jwt; clerk/atlas default to <issuer>/.well-known/jwks.json."),
+    audience: z6.string().optional().describe("Expected aud. For oidc_jwt an audience or authorizedParties is required (a shared issuer mints tokens for every app)."),
+    authorizedParties: z6.array(z6.string()).optional().describe("Your own origins (https://www.example.com) the token\u2019s azp must be one of. Required for clerk and atlas; for oidc_jwt when there is no audience."),
+    emailClaim: z6.string().optional().describe("Default email."),
+    emailVerifiedClaim: z6.string().optional().describe("Default email_verified; must be exactly true."),
+    sessionCookieName: z6.string().optional().describe("Default __session: the cookie the hosted page on your custom domain reads."),
+    trustEmailClaim: z6.boolean().optional().describe("clerk/atlas only, default false. True: a token without the verified claim is accepted, its email claim taken as verified. Set only if every address your provider puts in that claim is verified.")
   };
   const identityBody = (a) => {
     const out = { type: a.type, issuer: a.issuer };
@@ -1873,19 +2216,19 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "get_rights_identity",
     "The sign-in provider a site\u2019s rights requests are verified with: its own setting, else the organisation default, else none (`source` says which). Read-only.",
-    { cbid: z5.string() },
+    { cbid: z6.string() },
     (a) => client.rightsIdentity.get(a.cbid)
   );
   tool(
     "set_rights_identity",
     `Connect a site\u2019s sign-in provider so a visitor signed in to the site is verified by their session, with no code mail. ${IDENTITY_NOTE} Audited.`,
-    { cbid: z5.string(), ...identityInput },
+    { cbid: z6.string(), ...identityInput },
     (a) => client.rightsIdentity.set(a.cbid, identityBody(a))
   );
   tool(
     "remove_rights_identity",
     "Remove a site\u2019s own sign-in provider: it inherits the organisation default again (or none). Returns the setting now in force.",
-    { cbid: z5.string() },
+    { cbid: z6.string() },
     (a) => client.rightsIdentity.remove(a.cbid)
   );
   tool(
@@ -1909,22 +2252,40 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "get_audit_log",
     "The organisation\u2019s audit log, newest first: administrative changes made in the dashboard or through the API, and who made them. Read-only.",
-    { limit: z5.number().int().min(1).max(500).optional() },
-    (a) => client.audit(a.limit)
+    { limit: z6.number().int().min(1).max(500).optional(), actor: z6.string().optional().describe('"self" for this key\u2019s own rows (allowed for scoped keys), or one actor id.') },
+    (a) => client.audit(a.limit, a.actor ? { actor: a.actor } : void 0)
+  );
+  tool(
+    "get_audit_sink",
+    "Where the organisation\u2019s audit log is streamed (as CloudEvents) and how the last delivery went. Never the secret. Read-only.",
+    {},
+    () => client.auditSink.get()
+  );
+  tool(
+    "set_audit_sink",
+    "Stream the organisation\u2019s audit log to an HTTPS endpoint as CloudEvents 1.0, signed like webhooks. Replaces any sink. A generated secret is returned once. Audited.",
+    { type: z6.literal("webhook"), url: z6.string(), secret: z6.string().optional().describe("16\u2013256 characters; omitted: one is generated.") },
+    (a) => client.auditSink.set({ type: "webhook", url: a.url, ...a.secret ? { secret: a.secret } : {} })
+  );
+  tool(
+    "remove_audit_sink",
+    "Stop streaming the audit log. Audited.",
+    {},
+    () => client.auditSink.remove()
   );
   tool(
     "upload_asset",
     "Upload an image \u2014 a banner logo \u2014 and get its public URL. data is base64 (a data: URL also works); PNG, JPEG, WebP, GIF or SVG, up to 1,000,000 bytes.",
     {
-      data: z5.string(),
-      contentType: z5.enum(["image/png", "image/jpeg", "image/webp", "image/gif", "image/svg+xml"])
+      data: z6.string(),
+      contentType: z6.enum(["image/png", "image/jpeg", "image/webp", "image/gif", "image/svg+xml"])
     },
     (a) => client.assets.upload({ data: a.data, contentType: a.contentType })
   );
   tool(
     "delete_asset",
     "Delete a stored image by its URL (or file name). Only your own organisation\u2019s images can be named.",
-    { url: z5.string().describe("The URL upload_asset returned, or just its file name.") },
+    { url: z6.string().describe("The URL upload_asset returned, or just its file name.") },
     async (a) => {
       await client.assets.delete(a.url);
       return { deleted: a.url };
@@ -1939,18 +2300,18 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "get_customer",
     "One child org: its controller details and usage. Read-only.",
-    { id: z5.string() },
+    { id: z6.string() },
     (a) => client.reseller.get(a.id)
   );
   tool(
     "provision_customer",
     "Create a new child org under this reseller. With `mintKey`, its first API key is returned once. Counts toward the reseller plan\u2019s pooled limits.",
     {
-      name: z5.string(),
-      ownerEmail: z5.string().optional(),
-      delegatedAccess: z5.boolean().optional().describe("Whether this reseller may act inside the child."),
-      mintKey: z5.boolean().optional(),
-      keyScopes: z5.array(z5.string()).optional()
+      name: z6.string(),
+      ownerEmail: z6.string().optional(),
+      delegatedAccess: z6.boolean().optional().describe("Whether this reseller may act inside the child."),
+      mintKey: z6.boolean().optional(),
+      keyScopes: z6.array(z6.string()).optional()
     },
     (a) => client.reseller.create({
       name: a.name,
@@ -1964,10 +2325,10 @@ ${JSON.stringify(r, null, 2)}` : r;
     "update_customer",
     "Change a child org\u2019s status, delegated access or DSAR routing. `dsarRouting: null` clears the override.",
     {
-      id: z5.string(),
-      status: z5.enum(["active", "suspended"]).optional(),
-      delegatedAccess: z5.boolean().optional(),
-      dsarRouting: z5.enum(["reseller", "child"]).nullable().optional()
+      id: z6.string(),
+      status: z6.enum(["active", "suspended"]).optional(),
+      delegatedAccess: z6.boolean().optional(),
+      dsarRouting: z6.enum(["reseller", "child"]).nullable().optional()
     },
     (a) => client.reseller.update(a.id, {
       ...a.status ? { status: a.status } : {},
@@ -1978,7 +2339,7 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "suspend_customer",
     "Suspend a child org: it stops ingesting consent and its keys stop working, and it can be reactivated with update_customer. Its data is kept. (Permanent deletion is deliberately not available here.)",
-    { id: z5.string() },
+    { id: z6.string() },
     async (a) => {
       await client.reseller.deprovision(a.id);
       return { suspended: a.id };
@@ -1987,78 +2348,78 @@ ${JSON.stringify(r, null, 2)}` : r;
   tool(
     "list_customer_keys",
     "A child org's API key prefixes. Never the secrets. Read-only.",
-    { id: z5.string() },
+    { id: z6.string() },
     (a) => client.reseller.listKeys(a.id)
   );
   tool(
     "issue_customer_key",
     "Mint an API key for a child org. The secret is returned once. Prefer scopes and a property lock over a full-access key.",
-    { id: z5.string(), name: z5.string().optional(), scopes: z5.array(z5.string()).optional(), cbids: z5.array(z5.string()).min(1).optional() },
+    { id: z6.string(), name: z6.string().optional(), scopes: z6.array(z6.string()).optional(), cbids: z6.array(z6.string()).min(1).optional() },
     (a) => client.reseller.mintKey(a.id, {
       ...a.name ? { name: a.name } : {},
       ...a.scopes ? { scopes: a.scopes } : {},
       ...a.cbids ? { cbids: a.cbids } : {}
     })
   );
-  tool("revoke_customer_key", "Revoke a child org's API key by prefix. Takes effect immediately.", { id: z5.string(), prefix: z5.string() }, async (a) => {
+  tool("revoke_customer_key", "Revoke a child org's API key by prefix. Takes effect immediately.", { id: z6.string(), prefix: z6.string() }, async (a) => {
     await client.reseller.revokeKey(a.id, a.prefix);
     return { revoked: a.prefix };
   });
   tool(
     "erase_subject_data",
     "IRREVERSIBLY crypto-erase a data subject's consent records by their consent-receipt stamp (GDPR/CCPA deletion). Destroys the encryption key; the tamper-evident chain stays intact.",
-    { cbid: z5.string(), stamp: z5.string() },
+    { cbid: z6.string(), stamp: z6.string() },
     (a) => client.consent.eraseSubject(a.cbid, a.stamp)
   );
   tool(
     "export_subject_data",
     "Export a data subject's consent records (GDPR access/portability).",
-    { cbid: z5.string(), stamp: z5.string() },
+    { cbid: z6.string(), stamp: z6.string() },
     (a) => client.consent.exportSubject(a.cbid, a.stamp)
   );
   tool("list_banners", "List reusable banner designs in your org.", {}, () => client.banners.list());
   tool(
     "create_banner",
     "Create a reusable banner design.",
-    { name: z5.string(), json: z5.record(z5.unknown()).describe("A v2 BannerConfig.") },
+    { name: z6.string(), json: z6.record(z6.unknown()).describe("A v2 BannerConfig.") },
     (a) => client.banners.create({ name: a.name, json: a.json })
   );
-  tool("get_banner", "Get a banner design by id.", { id: z5.string() }, (a) => client.banners.get(a.id));
+  tool("get_banner", "Get a banner design by id.", { id: z6.string() }, (a) => client.banners.get(a.id));
   tool(
     "update_banner",
     "Update a banner design (name and/or config).",
-    { id: z5.string(), name: z5.string().optional(), json: z5.record(z5.unknown()).optional() },
+    { id: z6.string(), name: z6.string().optional(), json: z6.record(z6.unknown()).optional() },
     (a) => client.banners.update(a.id, {
       ...a.name !== void 0 ? { name: a.name } : {},
       ...a.json !== void 0 ? { json: a.json } : {}
     })
   );
-  tool("delete_banner", "Delete a banner design (fails if assigned to sites).", { id: z5.string() }, async (a) => {
+  tool("delete_banner", "Delete a banner design (fails if assigned to sites).", { id: z6.string() }, async (a) => {
     await client.banners.delete(a.id);
     return { ok: true };
   });
   tool(
     "get_banner_assignments",
     "The sites (cbids) a banner design is currently assigned to. Read-only.",
-    { id: z5.string() },
+    { id: z6.string() },
     (a) => client.banners.assignments(a.id)
   );
   tool(
     "assign_banner",
     "Set which sites (cbids) use a banner design.",
-    { id: z5.string(), cbids: z5.array(z5.string()) },
+    { id: z6.string(), cbids: z6.array(z6.string()) },
     (a) => client.banners.setAssignments(a.id, a.cbids)
   );
   tool(
     "publish_banner",
     "Publish a design live to all its assigned sites.",
-    { id: z5.string() },
+    { id: z6.string() },
     (a) => client.banners.publish(a.id)
   );
 }
 
 // src/index.ts
-var MCP_VERSION = "0.5.0";
+var MCP_VERSION = "0.7.0";
 function createCookieMunchMcp(opts) {
   const client = opts.client ?? createCookieMunch({ apiKey: opts.apiKey, baseUrl: opts.baseUrl, userAgent: opts.userAgent ?? `cookiemunch-mcp/${MCP_VERSION}` });
   const server = new McpServer({ name: "cookiemunch", version: "1.0.0" });
@@ -2071,4 +2432,4 @@ export {
   MCP_VERSION,
   createCookieMunchMcp
 };
-//# sourceMappingURL=chunk-IQLCPEWI.js.map
+//# sourceMappingURL=chunk-QCLUFJZ5.js.map